CVE-2017-12814

Stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 on Windows allows attackers to execute arbitrary code via a long environment variable.

• CWE-119

• http://www.securityfocus.com/bid/101051Third Party Advisory, VDB Entry
• https://perl5.git.perl.org/perl.git/log/refs/tags/v5.24.3-RC1Release Notes, Vendor Advisory
• https://perl5.git.perl.org/perl.git/log/refs/tags/v5.26.1-RC1Release Notes, Vendor Advisory
• https://rt.perl.org/Public/Bug/Display.html?id=131665Exploit, Patch, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20180426-0001/
• https://www.oracle.com/security-alerts/cpujul2020.html
• http://www.securityfocus.com/bid/101051Third Party Advisory, VDB Entry
• https://perl5.git.perl.org/perl.git/log/refs/tags/v5.24.3-RC1Release Notes, Vendor Advisory
• https://perl5.git.perl.org/perl.git/log/refs/tags/v5.26.1-RC1Release Notes, Vendor Advisory
• https://rt.perl.org/Public/Bug/Display.html?id=131665Exploit, Patch, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20180426-0001/
• https://www.oracle.com/security-alerts/cpujul2020.html

Published

Sep 28, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12809QEMU (aka Quick Emulator), when built with the IDE disk and …6.5
• CVE-2017-1281IBM Rational Quality Manager and IBM Rational Collaborative …5.4
• CVE-2017-12810PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists…
• CVE-2017-12811PHPJabbers Star Rating Script 4.0 has stored XSS via a ratin…
• CVE-2017-12812PHPJabbers Night Club Booking Software has stored XSS in the…
• CVE-2017-12813PHPJabbers File Sharing Script 1.0 has stored XSS in the com…
• CVE-2017-12815Analysis of the Bomgar Remote Support Portal JavaStart.jar A…
• CVE-2017-12816In Kaspersky Internet Security for Android 11.12.4.1622, som…9.8
• CVE-2017-12817In Kaspersky Internet Security for Android 11.12.4.1622, som…7.5
• CVE-2017-12818Stack overflow in custom XML-parser in Gemalto's HASP SRM, S…
• CVE-2017-12819Remote manipulations with language pack updater lead to NTLM…
• CVE-2017-1282IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cr…