CyberRota Analysis
AI-GeneratedVersions of Tie::Hash::Regex prior to 2.0.0 for Perl are vulnerable to exceptions being thrown by the FETCH, EXISTS, and DELETE methods when processing malformed regular expressions. This can lead to application crashes when external input is used as lookup keys, potentially disrupting service availability. Developers and organizations using this module should prioritize upgrading to version 2.0.0 or later to mitigate the risk of application failures due to unhandled exceptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Tie::Hash::Regex versions before 2.0.0 for Perl will throw an exception on unparseable lookup keys. The FETCH, EXISTS and DELETE methods throw an exception when on malformed regular expressions. Each method falls back to a regex match when the key is not already stored in the hash, compiling the caller's key with a bare qr// and no eval guard. A key that is not a valid regular expression pattern, such as a single unmatched bracket, dies. An application that looks up externally supplied strings in a tied hash will die on an invalid key.