CVE-2014-4720

Related Files

Mandriva Linux Security Advisory 2014-192

Posted Oct 3, 2014

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2014-192 - The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service via an empty quoted string in an RFC 2822 address. The Email::Address module before 1.904 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service via vectors related to backtracking into the phrase.

tags | advisory, remote, denial of service, perl

systems | linux, mandriva

advisories | CVE-2014-0477, CVE-2014-4720

SHA-256 | fd50ca84aa78f0224f164d19ccc837e9fe063dbb1cb0e10514545665ccda3d3d

Download | Favorite | View