CVE-2018-18314: Canonical Ubuntu Linux

Critical severity, CVSS 9.8. EPSS: 6.1% chance of exploitation in the next 30 days.

Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations.

Affected products

• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only; version 18.04 only; version 18.10 only
• Debian Debian Linux: version 9.0 only
• Netapp E-Series Santricity OS Controller: from 11.0, up to and including 11.40
• Netapp Snap Creator Framework: affected versions not specified
• Netapp Snapcenter: affected versions not specified
• Netapp Snapdrive: affected versions not specified
• Perl Perl: before 5.26.3 (fixed in 5.26.3)
• Red Hat Enterprise Linux: version 6.0 only; version 7.0 only; version 7.4 only; version 7.5 only; version 7.6 only

Published 2018-12-07. Last modified 2026-06-17.