CVE-2014-1474 | BDVDB-2026-62660 Detail

Description#

Algorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0 through 4.2.2, allows remote attackers to cause a denial of service (CPU consumption) via a string without an address.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://blog.bestpractical.com/2014/01/security-vulnerability-in-rt-42.html
https://metacpan.org/changes/release/ALEXMV/Email-Address-List-0.02
http://lists.bestpractical.com/pipermail/rt-announce/2014-June/000257.html

Exploit#

No public exploit known

History#

Version 12014-07-15Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.