CVE-2018-12558

Published: Jun 20, 2018Modified: Nov 21, 2024

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The parse() method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters ("\f").

Affected (1)

Products: Email\: \

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Email\ \	Up to 1.909

Related CWEs

Inefficient Algorithmic Complexity

An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.

References (6)

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00012.html

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2018/06/19/3

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=901873

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00012.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2018/06/19/3

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=901873

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.