CVE-2014-4720

Email::Address module before 1.904 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service (CPU consumption) via vectors related to "backtracking into the phrase," a different vulnerability than CVE-2014-0477.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2014-07-06

Last modified

2024-09-16

Affected products

• \ (Email\)

References

• http://seclists.org/oss-sec/2014/q2/563
• https://github.com/rjbs/Email-Address/blob/master/Changes