CVE-2018-12558

The parse() method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to...

Original description

The description as published by the source.

The parse() method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters ("\f").

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Alpine Linux ALPINE-CVE-2018-12558 perl-email-address Fixed in: 1.912-r0
Debian DEBIAN-CVE-2018-12558 libemail-address-perl Fixed in: 1.912-1

References

advisory openwall.com
advisory bugs.debian.org
web lists.opensuse.org