CVE-2014-4720 | BDVDB-2026-62508 Detail

Description#

Email::Address module before 1.904 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service (CPU consumption) via vectors related to "backtracking into the phrase," a different vulnerability than CVE-2014-0477.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://seclists.org/oss-sec/2014/q2/563
https://github.com/rjbs/Email-Address/blob/master/Changes

Exploit#

No public exploit known

History#

Version 12014-07-06Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.