Vulnerability Report

CVE-2008-1927

Title: Perl Memory Corruption

Memory Corruption

Proof Of Concept

No public PoC currently indexed for CVE-2008-1927.

CWE Category CWE-399

Published Date Apr 24, 2008

Modified Date Jun 16, 2026

Exploit Status Not Found

Score 5.0 CVSS v2.0

Exploit Probability (EPSS)

3.15%

Vulnerability Summary

CVE-2008-1927: Double free vulnerability in Perl 5.8.8 allows context-dependent attackers to cause a denial of service (memory corruption and crash) via a crafted regular expression containing UTF8 characters. NOTE: this issue might only be present on certain operating systems.

Impacted Vendors

perl 1

larry_wall 1

Reference Links

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=454792 http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html http://osvdb.org/44588 http://rt.perl.org/rt3/Public/Bug/Display.html?id=48156 http://secunia.com/advisories/29948 http://secunia.com/advisories/30025 http://secunia.com/advisories/30326 http://secunia.com/advisories/30624 http://secunia.com/advisories/31208 http://secunia.com/advisories/31328 http://secunia.com/advisories/31467 http://secunia.com/advisories/31604 http://secunia.com/advisories/31687 http://secunia.com/advisories/33314 http://secunia.com/advisories/33937 http://support.apple.com/kb/HT3438 http://support.avaya.com/elmodocs2/security/ASA-2008-317.htm http://support.avaya.com/elmodocs2/security/ASA-2008-361.htm http://wiki.rpath.com/Advisories:rPSA-2009-0011 http://www.debian.org/security/2008/dsa-1556 http://www.gentoo.org/security/en/glsa/glsa-200805-17.xml http://www.ipcop.org/index.php?name=News&file=article&sid=41 http://www.mandriva.com/security/advisories?name=MDVSA-2008:100 http://www.redhat.com/support/errata/RHSA-2008-0522.html http://www.redhat.com/support/errata/RHSA-2008-0532.html http://www.securityfocus.com/archive/1/500210/100/0/threaded http://www.securityfocus.com/bid/28928 http://www.securitytracker.com/id?1020253 http://www.ubuntu.com/usn/usn-700-1 http://www.ubuntu.com/usn/usn-700-2 http://www.vmware.com/security/advisories/VMSA-2008-0013.html http://www.vupen.com/english/advisories/2008/2265/references http://www.vupen.com/english/advisories/2008/2361 http://www.vupen.com/english/advisories/2008/2424 http://www.vupen.com/english/advisories/2009/0422 https://exchange.xforce.ibmcloud.com/vulnerabilities/41996 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10579 https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00601.html https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00607.html http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=454792 http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html http://osvdb.org/44588 http://rt.perl.org/rt3/Public/Bug/Display.html?id=48156 http://secunia.com/advisories/29948 http://secunia.com/advisories/30025 http://secunia.com/advisories/30326 http://secunia.com/advisories/30624 http://secunia.com/advisories/31208 http://secunia.com/advisories/31328 http://secunia.com/advisories/31467 http://secunia.com/advisories/31604 http://secunia.com/advisories/31687 http://secunia.com/advisories/33314 http://secunia.com/advisories/33937 http://support.apple.com/kb/HT3438 http://support.avaya.com/elmodocs2/security/ASA-2008-317.htm http://support.avaya.com/elmodocs2/security/ASA-2008-361.htm http://wiki.rpath.com/Advisories:rPSA-2009-0011 http://www.debian.org/security/2008/dsa-1556 http://www.gentoo.org/security/en/glsa/glsa-200805-17.xml http://www.ipcop.org/index.php?name=News&file=article&sid=41 http://www.mandriva.com/security/advisories?name=MDVSA-2008:100 http://www.redhat.com/support/errata/RHSA-2008-0522.html http://www.redhat.com/support/errata/RHSA-2008-0532.html http://www.securityfocus.com/archive/1/500210/100/0/threaded http://www.securityfocus.com/bid/28928 http://www.securitytracker.com/id?1020253 http://www.ubuntu.com/usn/usn-700-1 http://www.ubuntu.com/usn/usn-700-2 http://www.vmware.com/security/advisories/VMSA-2008-0013.html http://www.vupen.com/english/advisories/2008/2265/references http://www.vupen.com/english/advisories/2008/2361 http://www.vupen.com/english/advisories/2008/2424 http://www.vupen.com/english/advisories/2009/0422 https://exchange.xforce.ibmcloud.com/vulnerabilities/41996 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10579 https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00601.html https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00607.html

CVSS v2.0

Source Entity [email protected]

Severity MEDIUM

5.0

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:L/Au:N/C:N/I:N/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2008-1927 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

June 16, 2026 MODIFIED

Vulnerability data updated via NVD.

April 09, 2025 MODIFIED

Vulnerability data or affected products updated.

April 24, 2008 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected Stack

No specific products linked.