← Back

CVE-2014-0477

nvd nist
Published: Jul 3, 2014Modified: May 6, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service (CPU consumption) via an empty quoted string in an RFC 2822 address.

Affected (37)

Products: Email\: \ · Fedoraproject: Fedora
Email\
1 product
\
Fedoraproject
1 product
Fedora
Configuration A
37 vulnerable
Vulnerable SoftwareAffected Versions
Email\
\
Up to 1.904
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
\
Version address_module_project email\
Fedora
All versions

References (18)

Source: security@debian.org
Source: security@debian.org
Source: security@debian.org
Source: security@debian.org
Source: security@debian.org
Source: security@debian.org
Source: security@debian.org
Source: security@debian.org
ExploitPatch
Source: security@debian.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatch
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.