Perl 'Email::Address' Module CVE-2014-4720 Denial of Service Vulnerability

Bugtraq ID:	68446
Class:	Design Error
CVE:	CVE-2014-4720
Remote:	Yes
Local:	No
Published:	Jun 14 2014 12:00AM
Updated:	Oct 06 2014 12:01AM
Credit:	The vendor reported this issue.
Vulnerable:
Not Vulnerable:

Perl 'Email::Address' Module CVE-2014-4720 Denial of Service Vulnerability

Email::Address module for Perl is prone to a remote denial-of-service vulnerability.

Exploiting this issue allows attackers to trigger denial-of-service conditions due to excessive CPU consumption.

Versions prior to Email::Address 1.904 are vulnerable.

Perl 'Email::Address' Module CVE-2014-4720 Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Perl 'Email::Address' Module CVE-2014-4720 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Perl 'Email::Address' Module CVE-2014-4720 Denial of Service Vulnerability

References:

• Perl Homepage (Perl)