5.1

CVE-2011-2939: dan_kogai encode_module Numeric Errors

CVSS: 5.1v2.0MediumModified
AliasesDEBIAN-CVE-2011-2939
Published 13-01-2012Last modified 06-08-2024
Open JSON

Vulnerability summary

CVE-2011-2939 is a medium (CVSS 5.1) Numeric Errors vulnerability in dan_kogai encode_module. EPSS estimates a 2.56% chance of exploitation in the next 30 days, higher than 84.9% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
5.1/10
010
Medium · v2.0 (NVD)
EPSS score
2.56%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 1
RHSA-2011:1424

Timeline

  1. 13-01-2012
    PublishedVulnerability first disclosed.
  2. 06-08-2024
    Last modifiedVulnerability information updated.

Description

Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Unicode string, which triggers a heap-based buffer overflow.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

2.56%

Chance of exploitation in the next 30 days

Percentile

85%

Versus all other CVEs

30-day change

0.00 pp

From 2.56% on 21-09-2026

21-09-202621-10-2026
EPSS score
2.56%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • referenceUnverified

    Exploit Reference (perl5.git.perl.org)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Debian2 products
  • libencode-perl< 2.44-1
  • perl< 5.12.4-4
Dan_kogai1 product
  • encode_module≤ 2.43 | 0.93 | 0.94 | 0.95 | 0.96 | 0.97 | 0.98 | 0.99 | 1.00 | 1.01 | 1.10 | 1.11 | 1.20 | 1.21 | 1.25 | 1.26 | 1.28 | 1.30 | 1.31 | 1.32 | 1.33 | 1.34 | 1.40 | 1.41 | 1.42 | 1.50 | 1.51 | 1.52 | 1.53 | 1.54 | 1.55 | 1.56 | 1.57 | 1.58 | 1.59 | 1.60 | 1.61 | 1.62 | 1.63 | 1.64 | 1.65 | 1.66 | 1.67 | 1.68 | 1.69 | 1.70 | 1.71 | 1.72 | 1.73 | 1.74 | 1.75 | 1.76 | 1.77 | 1.78 | 1.79 | 1.80 | 1.81 | 1.82 | 1.83 | 1.84 | 1.85 | 1.86 | 1.87 | 1.88 | 1.89 | 1.90 | 1.91 | 1.92 | 1.93 | 1.94 | 1.95 | 1.96 | 1.97 | 1.98 | 1.99 | 2.0 | 2.01 | 2.02 | 2.03 | 2.04 | 2.05 | 2.06 | 2.07 | 2.08 | 2.09 | 2.10 | 2.11 | 2.12 | 2.13 | 2.14 | 2.15 | 2.16 | 2.17 | 2.18 | 2.19 | 2.20 | 2.21 | 2.22 | 2.23 | 2.24 | 2.25 | 2.26 | 2.27 | 2.28 | 2.29 | 2.30 | 2.31 | 2.32 | 2.33 | 2.34 | 2.35 | 2.36 | 2.37 | 2.38 | 2.39 | 2.40 | 2.41 | 2.42
Perl1 product
  • perl≤ 5.14.2 | 5.8.1 | 5.8.2 | 5.8.3 | 5.8.4 | 5.8.5 | 5.8.6 | 5.8.7 | 5.8.8 | 5.8.9 | 5.8.10 | 5.9.2 | 5.10 | 5.10.0 | 5.10.0:rc1 | 5.10.0:rc2 | 5.10.1 | 5.10.1:rc1 | 5.10.1:rc2 | 5.11.0 | 5.11.1 | 5.11.2 | 5.11.3 | 5.11.4 | 5.11.5 | 5.12.0 | 5.12.0:rc0 | 5.12.0:rc1 | 5.12.0:rc2 | 5.12.0:rc3 | 5.12.0:rc4 | 5.12.0:rc5 | 5.12.1 | 5.12.1:rc1 | 5.12.1:rc2 | 5.12.2 | 5.12.2:rc1 | 5.12.3 | 5.12.3:rc1 | 5.12.3:rc2 | 5.12.3:rc3 | 5.13.0 | 5.13.1 | 5.13.2 | 5.13.3 | 5.13.4 | 5.13.5 | 5.13.6 | 5.13.7 | 5.13.8 | 5.13.9 | 5.13.10 | 5.13.11 | 5.14.0 | 5.14.0:rc1 | 5.14.0:rc2 | 5.14.0:rc3 | 5.14.1

3 vendors · 4 products

References

15 links
Show all 15 references