CVE-2011-2939 json
Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might all…
published 2012-01-13 14 y ago modified 2026-06-16 4 mo ago also EUVD-2011-2907
- cvss
- 5.1
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.6%
- EPSS 2.6% chance of exploitation in 30 days, percentile 85%
- public exploits
- 0
- none known
Summary
Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Unicode string, which triggers a heap-based buffer overflow.
Patch / fix
- perl Debian 14, Debian 13, Debian 12 5.12.4-4
- libencode-perl Debian 14, Debian 13, Debian 12 2.44-1
debian advisories DEBIAN-CVE-2011-2939
- perl RHEL 6 4:5.10.1-119.el6_1.1
- perl-CGI RHEL 6 3.51-119.el6_1.1
- perl-core RHEL 6 5.10.1-119.el6_1.1
- perl-CPAN RHEL 6 1.9402-119.el6_1.1
- perl-libs RHEL 6 4:5.10.1-119.el6_1.1
- perl-parent RHEL 6 1:0.221-119.el6_1.1
- perl-IO-Zlib RHEL 6 1:1.09-119.el6_1.1
- perl-IPC-Cmd RHEL 6 1:0.56-119.el6_1.1
red hat advisories RHSA-2011:1424
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2011-2939 updated cvss 5.1
Perl decode_xs heap-based buffer overflow
-
Red Hat Enterprise Linux 4 perl Red Hat Enterprise Linux 5 perlaffected: no fix available
-
Red Hat Enterprise Linux Server (v. 6) perl 5.10.1-119.el6_1.1, perl-CGI 3.51-119.el6_1.1, perl-core 5.10.1-119.el6_1.1, perl-CPAN 1.9402-119.el6_1.1, perl-libs 5.10.1-119.el6_1.1, perl-IO-Zlib 1.09-119.el6_1.1, +37 morefixed: vendor fix RHSA-2011:1424
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
2.56% chance of exploitation in the next 30 days, higher than 85% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- perl5.git.perl.org http://perl5.git.perl.org/perl.git/commitdiff/e46d973584785af1f445c4dedbee4243419cb860#patch5 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 5.1 | AV:N/AC:H/Au:N/C:P/I:P/A:P |
Classification
- Weakness
-
- CWE-189 Numeric Errors
References
-
perl5.git.perl.org
/perl.git/commitdiff/e46d973584785af1f445c4dedbee4243419cb860#patch5
exploit, patch
-
bugzilla.redhat.com
/show_bug.cgi?id=731246
patch
-
openwall.com
/lists/oss-security/2011/08/19/17
mailing-list, patch
-
ubuntu.com
/usn/USN-1643-1
vendor-advisory
-
mandriva.com
/security/advisories?name=MDVSA-2012:008
vendor-advisory
-
redhat.com
/support/errata/RHSA-2011-1424.html
vendor-advisory
-
secunia.com
/advisories/46989
third-party-advisory
- cpansearch.perl.org /src/FLORA/perl-5.14.2/pod/perldelta.pod
-
secunia.com
/advisories/55314
third-party-advisory
-
securityfocus.com
/bid/49858
vdb-entry
-
openwall.com
/lists/oss-security/2011/08/18/8
mailing-list
-
secunia.com
/advisories/46172
third-party-advisory
- search.cpan.org /~flora/perl-5.14.2/pod/perldelta.pod#Encode_decode_xs_n-byte_heap-overflow_%28CVE-2011-2939%29
-
secunia.com
/advisories/51457
third-party-advisory
Sources
- CVE List CVE-2011-2939
- NVD CVE-2011-2939
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.