CVE-2018-18313: Apple Mac OS X

Critical severity, CVSS 9.1. EPSS: 9.5% chance of exploitation in the next 30 days.

Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory.

Affected products

• Apple Mac OS X: before 10.14.4 (fixed in 10.14.4)
• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 16.04 only; version 18.04 only; version 18.10 only
• Debian Debian Linux: version 9.0 only
• Netapp E-Series Santricity OS Controller: from 11.0, up to and including 11.40
• Netapp Snap Creator Framework: affected versions not specified
• Netapp Snapcenter: affected versions not specified
• Netapp Snapdrive: affected versions not specified
• Perl Perl: before 5.26.3 (fixed in 5.26.3)
• Red Hat Enterprise Linux: version 6.0 only; version 7.0 only; version 7.4 only; version 7.5 only; version 7.6 only

Published 2018-12-07. Last modified 2026-06-17.