Vulnerability Report

CVE-2013-1667

Title: Perl Denial of Service (DoS)

DoS

Proof Of Concept

No public PoC currently indexed for CVE-2013-1667.

CWE Category CWE-399

Published Date Mar 14, 2013

Modified Date Jun 16, 2026

Exploit Status Not Found

Score 7.5 CVSS v2.0

Exploit Probability (EPSS)

3.45%

Vulnerability Summary

CVE-2013-1667: The rehash mechanism in Perl 5.8.2 through 5.16.x allows context-dependent attackers to cause a denial of service (memory consumption and crash) via a crafted hash key.

Impacted Vendors

perl 1

larry_wall 1

Reference Links

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702296 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735 http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html http://marc.info/?l=bugtraq&m=137891988921058&w=2 http://osvdb.org/90892 http://perl5.git.perl.org/perl.git/commitdiff/6e79fe5 http://perl5.git.perl.org/perl.git/commitdiff/9d83adc http://perl5.git.perl.org/perl.git/commitdiff/d59e31f http://rhn.redhat.com/errata/RHSA-2013-0685.html http://secunia.com/advisories/52472 http://secunia.com/advisories/52499 http://www.debian.org/security/2013/dsa-2641 http://www.mandriva.com/security/advisories?name=MDVSA-2013:113 http://www.nntp.perl.org/group/perl.perl5.porters/2013/03/msg199755.html http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html http://www.securityfocus.com/bid/58311 http://www.ubuntu.com/usn/USN-1770-1 https://bugzilla.redhat.com/show_bug.cgi?id=912276 https://exchange.xforce.ibmcloud.com/vulnerabilities/82598 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18771 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0094 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702296 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735 http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html http://marc.info/?l=bugtraq&m=137891988921058&w=2 http://osvdb.org/90892 http://perl5.git.perl.org/perl.git/commitdiff/6e79fe5 http://perl5.git.perl.org/perl.git/commitdiff/9d83adc http://perl5.git.perl.org/perl.git/commitdiff/d59e31f http://rhn.redhat.com/errata/RHSA-2013-0685.html http://secunia.com/advisories/52472 http://secunia.com/advisories/52499 http://www.debian.org/security/2013/dsa-2641 http://www.mandriva.com/security/advisories?name=MDVSA-2013:113 http://www.nntp.perl.org/group/perl.perl5.porters/2013/03/msg199755.html http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html http://www.securityfocus.com/bid/58311 http://www.ubuntu.com/usn/USN-1770-1 https://bugzilla.redhat.com/show_bug.cgi?id=912276 https://exchange.xforce.ibmcloud.com/vulnerabilities/82598 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18771 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0094

CVSS v2.0

Source Entity [email protected]

Severity HIGH

7.5

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:L/Au:N/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2013-1667 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

June 16, 2026 MODIFIED

Vulnerability data updated via NVD.

April 29, 2026 MODIFIED

Vulnerability data updated via NVD.

April 11, 2025 MODIFIED

Vulnerability data or affected products updated.

March 14, 2013 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected Stack

No specific products linked.