CVE-2018-12558

The parse() method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

The parse() method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters ("\f").

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Alpine Linux ALPINE-CVE-2018-12558 perl-email-address Corrigé dans: 1.912-r0
Debian DEBIAN-CVE-2018-12558 libemail-address-perl Corrigé dans: 1.912-1

Références

advisory openwall.com
advisory bugs.debian.org
web lists.opensuse.org