ISOMAN

CVE

CVE-2014-0477

The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service (CPU consumption) via an empty quoted string in an RFC 2822 address.

Severity
MEDIUM
CVSS
5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Fedora Linux44 x86_64 workstation liveunknownsource
Fedora Linux44 x86_64 server dvdunknownsource
Fedora Linux44 x86_64 server netinstunknownsource
Fedora Linux44 x86_64 everything netinstunknownsource
Fedora Linux44 x86_64 budgie liveunknownsource
Fedora Linux44 x86_64 cosmic liveunknownsource
Fedora Linux44 x86_64 cinnamon liveunknownsource
Fedora Linux44 x86_64 kde-mobile liveunknownsource
Fedora Linux44 x86_64 lxde liveunknownsource
Fedora Linux44 x86_64 lxqt liveunknownsource
Fedora Linux44 x86_64 mate-compiz liveunknownsource
Fedora Linux44 x86_64 miraclewm liveunknownsource
Fedora Linux44 x86_64 soas liveunknownsource
Fedora Linux44 x86_64 sway liveunknownsource
Fedora Linux44 x86_64 xfce liveunknownsource
Fedora Linux44 x86_64 i3 liveunknownsource
Fedora Linux44 x86_64 astronomy-kde liveunknownsource
Fedora Linux44 x86_64 design-suite liveunknownsource
Fedora Linux44 x86_64 games liveunknownsource
Fedora Linux44 x86_64 jam-kde liveunknownsource
Fedora Linux44 x86_64 python-classroom liveunknownsource
Fedora Linux44 x86_64 robotics liveunknownsource
Fedora Linux44 x86_64 scientific-kde liveunknownsource
Fedora Linux44 x86_64 security liveunknownsource

References

  1. http://seclists.org/oss-sec/2014/q2/563
  2. http://secunia.com/advisories/59212
  3. http://secunia.com/advisories/59333
  4. http://secunia.com/advisories/61981
  5. http://www.debian.org/security/2014/dsa-2969
  6. https://bugzilla.redhat.com/show_bug.cgi?id=1110723
  7. https://github.com/rjbs/Email-Address/blob/master/Changes
  8. https://github.com/rjbs/Email-Address/commit/83f8306117115729ac9346523762c0c396251eb5
  9. https://metacpan.org/release/RJBS/Email-Address-1.905
  10. http://seclists.org/oss-sec/2014/q2/563
  11. http://secunia.com/advisories/59212
  12. http://secunia.com/advisories/59333
  13. http://secunia.com/advisories/61981
  14. http://www.debian.org/security/2014/dsa-2969
  15. https://bugzilla.redhat.com/show_bug.cgi?id=1110723
  16. https://github.com/rjbs/Email-Address/blob/master/Changes
  17. https://github.com/rjbs/Email-Address/commit/83f8306117115729ac9346523762c0c396251eb5
  18. https://metacpan.org/release/RJBS/Email-Address-1.905