Vulnerabilities
Misconfiguration
Runtime Security
Compliance
CVE Vulnerabilities

CVE-2014-4720

Published: Jul 06, 2014 | Modified: Jul 07, 2014
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2014-4720
CWEhttps://cwe.mitre.org/data/definitions/NVD-Other.html

Email::Address module before 1.904 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service (CPU consumption) via vectors related to backtracking into the phrase, a different vulnerability than CVE-2014-0477.

Affected Software

Name Vendor Start Version End Version
Email::address Email::address_module_project 1.1 1.1
Email::address Email::address_module_project 1.2 1.2
Email::address Email::address_module_project 1.3 1.3
Email::address Email::address_module_project 1.5 1.5
Email::address Email::address_module_project 1.6 1.6
Email::address Email::address_module_project 1.7 1.7
Email::address Email::address_module_project 1.80 1.80
Email::address Email::address_module_project 1.85 1.85
Email::address Email::address_module_project 1.86 1.86
Email::address Email::address_module_project 1.870 1.870
Email::address Email::address_module_project 1.871 1.871
Email::address Email::address_module_project 1.880 1.880
Email::address Email::address_module_project 1.881 1.881
Email::address Email::address_module_project 1.882 1.882
Email::address Email::address_module_project 1.883 1.883
Email::address Email::address_module_project 1.884 1.884
Email::address Email::address_module_project 1.885 1.885
Email::address Email::address_module_project 1.886 1.886
Email::address Email::address_module_project 1.887 1.887
Email::address Email::address_module_project 1.888 1.888
Email::address Email::address_module_project 1.889 1.889
Email::address Email::address_module_project 1.890 1.890
Email::address Email::address_module_project 1.891 1.891
Email::address Email::address_module_project 1.892 1.892
Email::address Email::address_module_project 1.893 1.893
Email::address Email::address_module_project 1.894 1.894
Email::address Email::address_module_project 1.895 1.895
Email::address Email::address_module_project 1.896 1.896
Email::address Email::address_module_project 1.897 1.897
Email::address Email::address_module_project 1.898 1.898
Email::address Email::address_module_project 1.899 1.899
Email::address Email::address_module_project 1.900 1.900
Email::address Email::address_module_project 1.901 1.901
Email::address Email::address_module_project 1.902 1.902
Email::address Email::address_module_project * 1.903
Libemail-address-perl Ubuntu lucid *
Libemail-address-perl Ubuntu precise *
Libemail-address-perl Ubuntu saucy *
Libemail-address-perl Ubuntu trusty *
Libemail-address-perl Ubuntu upstream *

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2023 Aqua Security Software Ltd.   Privacy Policy | Terms of Use