Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2008-1927

17
FAUCET Score

CVE-2008-1927 describes a double free vulnerability in Perl version 5.8.8, potentially affecting certain operating systems. An unauthenticated attacker could exploit this by crafting a regular expression with UTF8 characters, leading to memory corruption and a denial of service. With a CVSS score of 5.0, this vulnerability is considered medium severity, requiring no authentication and having low attack complexity, though its impact is limited to availability. There is no evidence of active exploitation, public exploit code, or significant community discussion or media coverage, suggesting a low current threat level.

Impacted Technologies

VendorProductVersion(s)CPE
5.8.8CPE matchmatch criteria
cpe:2.3:a:perl:perl:5.8.8:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

5.0MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
2.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
3.15%
Probability of exploitation in next 30 days
EPSS Percentile
86.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0315 is in the 81st percentile among its peer group of 23,725 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (24)

redhatpatch availablevia redhat_api
Product: Red Hat Certificate System 7.3Fixed in: ant-0:1.6.5-1jpp_1rh
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Certificate System 7.3Fixed in: avalon-logkit-0:1.2-2jpp_4rh
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Certificate System 7.3Fixed in: axis-0:1.2.1-1jpp_3rh
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Certificate System 7.3Fixed in: classpathx-jaf-0:1.0-2jpp_6rh
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Certificate System 7.3Fixed in: classpathx-mail-0:1.1.1-2jpp_8rh
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Certificate System 7.3Fixed in: geronimo-specs-0:1.0-0.M4.1jpp_10rh
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Certificate System 7.3Fixed in: jakarta-commons-modeler-0:2.0-3jpp_2rh
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Certificate System 7.3Fixed in: log4j-0:1.2.12-1jpp_1rh
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Certificate System 7.3Fixed in: mx4j-1:3.0.1-1jpp_4rh
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Certificate System 7.3Fixed in: pcsc-lite-0:1.3.3-3.el4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Certificate System 7.3Fixed in: rhpki-ca-0:7.3.0-20.el4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Certificate System 7.3Fixed in: rhpki-java-tools-0:7.3.0-10.el4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Certificate System 7.3Fixed in: rhpki-kra-0:7.3.0-14.el4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Certificate System 7.3Fixed in: rhpki-manage-0:7.3.0-19.el4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Certificate System 7.3Fixed in: rhpki-native-tools-0:7.3.0-6.el4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Certificate System 7.3Fixed in: rhpki-ocsp-0:7.3.0-13.el4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Certificate System 7.3Fixed in: rhpki-tks-0:7.3.0-13.el4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Certificate System 7.3Fixed in: tomcat5-0:5.5.23-0jpp_4rh.16
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Certificate System 7.3Fixed in: xerces-j2-0:2.7.1-1jpp_1rh
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Certificate System 7.3Fixed in: xml-commons-0:1.3.02-2jpp_1rh
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: perl-2:5.8.0-98.EL3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: perl-3:5.8.5-36.el4_6.3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: perl-4:5.8.8-10.el5_2.3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Web Application Stack for RHEL 4Fixed in: perl-4:5.8.8-6.el4s1_3
View patch

Vendor Advisories (1)

redhatCVE-2008-1927Important

perl: heap corruption by regular expressions with utf8 characters

Dec 4, 2007

References

bugs.debian.org / cgi-bin/bugreport.cgi
lists.apple.com / archives/security-announce/2009/Feb/msg00000.html
lists.opensuse.org / opensuse-security-announce/2008-08/msg00006.html
osvdb.org / 44588
rt.perl.org / rt3/Public/Bug/Display.html
secunia.com / advisories/29948
secunia.com / advisories/30025
secunia.com / advisories/30326
secunia.com / advisories/30624
secunia.com / advisories/31208
secunia.com / advisories/31328
secunia.com / advisories/31467
secunia.com / advisories/31604
secunia.com / advisories/31687
secunia.com / advisories/33314
secunia.com / advisories/33937
exchange.xforce.ibmcloud.com / vulnerabilities/41996
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10579
support.apple.com / kb/HT3438
support.avaya.com / elmodocs2/security/ASA-2008-317.htm
support.avaya.com / elmodocs2/security/ASA-2008-361.htm
redhat.com / archives/fedora-package-announce/2008-April/msg00601.html
redhat.com / archives/fedora-package-announce/2008-April/msg00607.html
wiki.rpath.com / Advisories:rPSA-2009-0011
debian.org / security/2008/dsa-1556
gentoo.org / security/en/glsa/glsa-200805-17.xml
ipcop.org / index.php
mandriva.com / security/advisories
redhat.com / support/errata/RHSA-2008-0522.html
redhat.com / support/errata/RHSA-2008-0532.html
securityfocus.com / archive/1/500210/100/0/threaded
securityfocus.com / bid/28928
securitytracker.com / id
ubuntu.com / usn/usn-700-1
ubuntu.com / usn/usn-700-2
vmware.com / security/advisories/VMSA-2008-0013.html
vupen.com / english/advisories/2008/2265/references
vupen.com / english/advisories/2008/2361
vupen.com / english/advisories/2008/2424
vupen.com / english/advisories/2009/0422