{
  "cveId": "CVE-2026-12087",
  "url": "https://patchblox.com/security/cve/CVE-2026-12087",
  "summary": "CVE-2026-12087 is fixed in 18 products on 1 platform, first by DEBIAN-CVE-2026-12087, released June 24, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Socket versions before 2.041 for Perl have an out-of-bounds heap read",
  "description": "Socket versions before 2.041 for Perl have an out-of-bounds heap read.  In Socket.xs, pack_ip_mreq_source() checks the length of its source argument before the argument is read, so the check tests the byte length carried over from the preceding multiaddr argument instead. Both addresses occupy a 4-byte field, so a valid multiaddr lets a source of any length pass the check, and the source is then copied into the 4-byte imr_sourceaddr field with a fixed-size copy. A source shorter than 4 bytes is not rejected, and the copy reads up to 3 bytes past the end of its buffer.  Calling pack_ip_mreq_source() with a source value shorter than 4 bytes copies adjacent heap memory into the returned packed structure.",
  "published": "2026-06-15T15:16:00Z",
  "severity": "Important",
  "cvss": 9.1,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
  "cwe": "Out-of-bounds Read",
  "epss": 0.00574,
  "epssPercentile": 0.47701,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12087",
  "fixes": [
    {
      "platform": "linux",
      "product": "libperl5.26",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.26.1-6ubuntu0.7\u002Besm3",
      "fix": "libperl5.26 5.26.1-6ubuntu0.7\u002Besm3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libperl5.26-5.26.1-6ubuntu0.7-esm3",
      "released": "2026-07-13T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "libperl5.30",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "5.30.0-9ubuntu0.5\u002Besm3",
      "fix": "libperl5.30 5.30.0-9ubuntu0.5\u002Besm3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libperl5.30-5.30.0-9ubuntu0.5-esm3",
      "released": "2026-07-13T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "libperl5.34",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "5.34.0-3ubuntu1.8",
      "fix": "libperl5.34 5.34.0-3ubuntu1.8",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libperl5.34-5.34.0-3ubuntu1.8",
      "released": "2026-07-13T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "libperl5.38t64",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "5.38.2-3.2ubuntu0.4",
      "fix": "libperl5.38t64 5.38.2-3.2ubuntu0.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libperl5.38t64-5.38.2-3.2ubuntu0.4",
      "released": "2026-07-13T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "libperl5.40",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "5.40.1-7ubuntu0.3",
      "fix": "libperl5.40 5.40.1-7ubuntu0.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-libperl5.40-5.40.1-7ubuntu0.3",
      "released": "2026-07-13T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "libsocket-perl",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "2.038-1\u002Bdeb13u1",
      "fix": "DEBIAN-CVE-2026-12087",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-12087",
      "released": "2026-06-24T14:07:24Z"
    },
    {
      "platform": "linux",
      "product": "libsocket-perl",
      "release": "Debian 14",
      "fixedVersion": "2.041-1",
      "fix": "DEBIAN-CVE-2026-12087",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-12087",
      "released": "2026-06-24T14:07:24Z"
    },
    {
      "platform": "linux",
      "product": "perl",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "5.36.0-7\u002Bdeb12u4",
      "fix": "DEBIAN-CVE-2026-12087",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-12087",
      "released": "2026-06-24T14:07:24Z"
    },
    {
      "platform": "linux",
      "product": "perl",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "5.40.1-6\u002Bdeb13u1",
      "fix": "DEBIAN-CVE-2026-12087",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-12087",
      "released": "2026-06-24T14:07:24Z"
    },
    {
      "platform": "linux",
      "product": "perl",
      "release": "Debian 14",
      "fixedVersion": "5.42.3-1",
      "fix": "DEBIAN-CVE-2026-12087",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-12087",
      "released": "2026-06-24T14:07:24Z"
    },
    {
      "platform": "linux",
      "product": "perl",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.26.1-6ubuntu0.7\u002Besm3",
      "fix": "perl 5.26.1-6ubuntu0.7\u002Besm3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-perl-5.26.1-6ubuntu0.7-esm3",
      "released": "2026-07-13T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "perl",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "5.30.0-9ubuntu0.5\u002Besm3",
      "fix": "perl 5.30.0-9ubuntu0.5\u002Besm3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-perl-5.30.0-9ubuntu0.5-esm3",
      "released": "2026-07-13T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "perl",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "5.34.0-3ubuntu1.8",
      "fix": "perl 5.34.0-3ubuntu1.8",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-perl-5.34.0-3ubuntu1.8",
      "released": "2026-07-13T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "perl",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "5.38.2-3.2ubuntu0.4",
      "fix": "perl 5.38.2-3.2ubuntu0.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-perl-5.38.2-3.2ubuntu0.4",
      "released": "2026-07-13T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "perl",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "5.40.1-7ubuntu0.3",
      "fix": "perl 5.40.1-7ubuntu0.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-perl-5.40.1-7ubuntu0.3",
      "released": "2026-07-13T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "perl",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "5.42.0-160000.3.1",
      "fix": "OPENSUSE-SU-2026:21411-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21411-1",
      "released": "2026-07-22T08:44:23Z"
    },
    {
      "platform": "linux",
      "product": "perl",
      "release": "sles 15.6",
      "fixedVersion": "5.26.1-150300.17.23.1",
      "fix": "SUSE-SU-2026:3558-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3558-1",
      "released": "2026-08-10T18:02:08Z"
    },
    {
      "platform": "linux",
      "product": "perl",
      "release": "sles 15.7",
      "fixedVersion": "5.26.1-150300.17.23.1",
      "fix": "SUSE-SU-2026:3558-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3558-1",
      "released": "2026-08-10T18:02:08Z"
    },
    {
      "platform": "linux",
      "product": "perl",
      "release": "sles 16.0",
      "fixedVersion": "5.42.0-160000.3.1",
      "fix": "SUSE-SU-2026:22847-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-22847-1",
      "released": "2026-07-22T08:50:06Z"
    },
    {
      "platform": "linux",
      "product": "perl-Socket",
      "release": "amzn 2023",
      "fixedVersion": "4:2.032-1.amzn2023.0.4",
      "fix": "ALAS2023-2026-2161",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2161",
      "released": "2026-09-14T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-Socket-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "4:2.032-1.amzn2023.0.4",
      "fix": "ALAS2023-2026-2161",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2161",
      "released": "2026-09-14T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-Socket-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "4:2.032-1.amzn2023.0.4",
      "fix": "ALAS2023-2026-2161",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2161",
      "released": "2026-09-14T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-Socket-tests",
      "release": "amzn 2023",
      "fixedVersion": "4:2.032-1.amzn2023.0.4",
      "fix": "ALAS2023-2026-2161",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2161",
      "released": "2026-09-14T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-base",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.26.1-6ubuntu0.7\u002Besm3",
      "fix": "perl-base 5.26.1-6ubuntu0.7\u002Besm3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-perl-base-5.26.1-6ubuntu0.7-esm3",
      "released": "2026-07-13T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-base",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "5.30.0-9ubuntu0.5\u002Besm3",
      "fix": "perl-base 5.30.0-9ubuntu0.5\u002Besm3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-perl-base-5.30.0-9ubuntu0.5-esm3",
      "released": "2026-07-13T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-base",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "5.34.0-3ubuntu1.8",
      "fix": "perl-base 5.34.0-3ubuntu1.8",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-perl-base-5.34.0-3ubuntu1.8",
      "released": "2026-07-13T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-base",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "5.38.2-3.2ubuntu0.4",
      "fix": "perl-base 5.38.2-3.2ubuntu0.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-perl-base-5.38.2-3.2ubuntu0.4",
      "released": "2026-07-13T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-base",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "5.40.1-7ubuntu0.3",
      "fix": "perl-base 5.40.1-7ubuntu0.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-perl-base-5.40.1-7ubuntu0.3",
      "released": "2026-07-13T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-debug",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.26.1-6ubuntu0.7\u002Besm3",
      "fix": "perl-debug 5.26.1-6ubuntu0.7\u002Besm3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-perl-debug-5.26.1-6ubuntu0.7-esm3",
      "released": "2026-07-13T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-debug",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "5.30.0-9ubuntu0.5\u002Besm3",
      "fix": "perl-debug 5.30.0-9ubuntu0.5\u002Besm3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-perl-debug-5.30.0-9ubuntu0.5-esm3",
      "released": "2026-07-13T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-debug",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "5.34.0-3ubuntu1.8",
      "fix": "perl-debug 5.34.0-3ubuntu1.8",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-perl-debug-5.34.0-3ubuntu1.8",
      "released": "2026-07-13T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-debug",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "5.38.2-3.2ubuntu0.4",
      "fix": "perl-debug 5.38.2-3.2ubuntu0.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-perl-debug-5.38.2-3.2ubuntu0.4",
      "released": "2026-07-13T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-debug",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "5.40.1-7ubuntu0.3",
      "fix": "perl-debug 5.40.1-7ubuntu0.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-perl-debug-5.40.1-7ubuntu0.3",
      "released": "2026-07-13T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-modules-5.26",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "5.26.1-6ubuntu0.7\u002Besm3",
      "fix": "perl-modules-5.26 5.26.1-6ubuntu0.7\u002Besm3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-perl-modules-5.26-5.26.1-6ubuntu0.7-esm3",
      "released": "2026-07-13T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-modules-5.30",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "5.30.0-9ubuntu0.5\u002Besm3",
      "fix": "perl-modules-5.30 5.30.0-9ubuntu0.5\u002Besm3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-perl-modules-5.30-5.30.0-9ubuntu0.5-esm3",
      "released": "2026-07-13T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-modules-5.34",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "5.34.0-3ubuntu1.8",
      "fix": "perl-modules-5.34 5.34.0-3ubuntu1.8",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-perl-modules-5.34-5.34.0-3ubuntu1.8",
      "released": "2026-07-13T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-modules-5.38",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "5.38.2-3.2ubuntu0.4",
      "fix": "perl-modules-5.38 5.38.2-3.2ubuntu0.4",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-perl-modules-5.38-5.38.2-3.2ubuntu0.4",
      "released": "2026-07-13T10:17:00Z"
    },
    {
      "platform": "linux",
      "product": "perl-modules-5.40",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "5.40.1-7ubuntu0.3",
      "fix": "perl-modules-5.40 5.40.1-7ubuntu0.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-perl-modules-5.40-5.40.1-7ubuntu0.3",
      "released": "2026-07-13T10:17:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T19:38:12Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}