← Back

\

Vendor: Email\ • 4 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Email\
1\
Nov 21, 2024
Jun 20, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The parse() method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem co...Show more
The parse() method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters ("\f").Show less
2Bestpractical
Email\
2\
Rt
May 6, 2026
Jul 15, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Algorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0 through 4.2.2, allows remote attackers to cause a denial of service (CPU consumption) via a string without an address.
1Email\
1\
May 6, 2026
Jul 6, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Email::Address module before 1.904 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service (CPU consumption) via vectors related to "backtracking into the phrase," a di...Show more
Email::Address module before 1.904 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service (CPU consumption) via vectors related to "backtracking into the phrase," a different vulnerability than CVE-2014-0477.Show less
2Email\
Fedoraproject
2\
Fedora
May 6, 2026
Jul 3, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service (CPU consumption) via an empty quoted string in an RFC...Show more
The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service (CPU consumption) via an empty quoted string in an RFC 2822 address.Show less