CVE-2014-1474

Algorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0 through 4.2.2, allows remote attackers to cause a denial of service (CPU consumption) via a string without an address.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 66%
VendorProductVersion
bestpracticalrt
4.2.0
bestpracticalrt
4.2.1
bestpracticalrt
4.2.2
email\\
𝑥
≤ 0.01
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libemail-address-list-perl
bullseye
0.06-1
fixed
sid
0.06-2
fixed
trixie
0.06-2
fixed
bookworm
0.06-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libemail-address-list-perl
trusty
dne
precise
dne
lucid
dne
Common Weakness Enumeration
References
http://blog.bestpractical.com/2014/01/security-vulnerability-in-rt-42.html
http://lists.bestpractical.com/pipermail/rt-announce/2014-June/000257.html
https://metacpan.org/changes/release/ALEXMV/Email-Address-List-0.02
http://blog.bestpractical.com/2014/01/security-vulnerability-in-rt-42.html
http://lists.bestpractical.com/pipermail/rt-announce/2014-June/000257.html
https://metacpan.org/changes/release/ALEXMV/Email-Address-List-0.02