This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2018-12558 →

DEBIAN-CVE-2018-12558

The parse() method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to...

Original description

The description as published by the source.

The parse() method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters ("\f").

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 libemail-address-perl

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.912-1"}]}]

Debian:13 libemail-address-perl

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.912-1"}]}]

Debian:14 libemail-address-perl

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.912-1"}]}]

References

advisory security-tracker.debian.org