CVE-2010-4777: The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running...

Security readout for executives and security teams

This CVE is a denial-of-service issue in Perl regular-expression handling when debugging is enabled. Crafted input can trigger an assertion failure and terminate an affected application. The reported impact is application crash, with examples involving SpamAssassin and OCSInventory, not data theft or code execution. Exposure is most plausible where older Perl runtimes run production services with debugging enabled and process untrusted input through regular expressions, especially mail filtering or inventory workflows similar to the cited SpamAssassin and OCSInventory cases. Treat as a targeted availability risk for legacy Perl-dependent services. Prioritize remediation if affected systems process untrusted input and support business-critical mail, inventory, or automation workflows. Mitigation focus: Check vendor Perl advisories and apply supported security updates.; Disable Perl debugging in production unless operationally required.; Review SpamAssassin and OCSInventory deployments for affected Perl dependencies..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.