CVE-2023-47038: Fedoraproject Fedora

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an attacker controlled byte buffer overflow in a heap allocated buffer.

Affected products

• Fedoraproject Fedora: version 39 only
• Perl Perl: from 5.30.0, up to and including 5.38.0
• Red Hat Enterprise Linux: version 8.0 only; version 9.0 only
• Red Hat Enterprise Linux Aus: version 9.4 only
• Red Hat Enterprise Linux Eus: version 9.4 only

Published 2023-12-18. Last modified 2026-06-17.