Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2015-7686
HistoryOct 06, 2015 - 1:59 a.m.

CVE-2015-7686

2015-10-0601:59:33
CWE-20
CWE-399
mitre
web.nvd.nist.gov
56
cve
2015
7686
algorithmic complexity
vulnerability
email-address module
perl
denial of service
cpu consumption
nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

7.2

Confidence

High

EPSS

0.009

Percentile

83.2%

JSON

Algorithmic complexity vulnerability in Address.pm in the Email-Address module 1.908 and earlier for Perl allows remote attackers to cause a denial of service (CPU consumption) via a crafted string containing a list of e-mail addresses in conjunction with parenthesis characters that can be associated with nested comments. NOTE: the default configuration in 1.908 mitigates this vulnerability but misparses certain realistic comments.

Affected configurations

Nvd
Node
email-address_projectemail-addressRange≤1.908perl
VendorProductVersionCPE
email-address_projectemail-address*cpe:2.3:a:email-address_project:email-address:*:*:*:*:*:perl:*:*

Related

ubuntucve 1
mageia 1
debiancve 1
openvas 6
prion 1
cvelist 1
nvd 1
nessus 7
fedora 2
debian 3
freebsd 1
ubuntucve
ubuntucve
CVE-2015-7686
2015-10-06 00:00:00
mageia
mageia
Updated perl-Email-Address packages fix security vulnerability
2016-11-25 20:04:30
debiancve
debiancve
CVE-2015-7686
2015-10-06 01:59:33
openvas
openvas
Mageia: Security Advisory (MGASA-2016-0397)
2022-01-28 00:00:00
Fedora Update for perl-Email-Address FEDORA-2019-8deebad756
2019-01-18 00:00:00
Huawei EulerOS: Security Advisory for perl-Email-Address (EulerOS-SA-2020-2104)
2020-09-29 00:00:00
prion
prion
Design/Logic Flaw
2015-10-06 01:59:00
cvelist
cvelist
CVE-2015-7686
2015-10-03 10:00:00
nvd
nvd
CVE-2015-7686
2015-10-06 01:59:33
nessus
nessus
Fedora 29 : perl-Email-Address (2019-026d5ab23d)
2019-01-18 00:00:00
EulerOS 2.0 SP3 : perl-Email-Address (EulerOS-SA-2020-2104)
2020-09-28 00:00:00
Fedora 28 : perl-Email-Address (2019-8deebad756)
2019-01-18 00:00:00
fedora
fedora
[SECURITY] Fedora 29 Update: perl-Email-Address-1.912-1.fc29
2019-01-18 02:14:42
[SECURITY] Fedora 28 Update: perl-Email-Address-1.912-1.fc28
2019-01-18 01:38:12
debian
debian
[SECURITY] [DSA 3882-1] request-tracker4 security update
2017-06-15 19:07:00
[SECURITY] [DLA 987-1] request-tracker4 security update
2017-06-15 21:45:46
[SECURITY] [DSA 3882-1] request-tracker4 security update
2017-06-15 19:07:00
freebsd
freebsd
rt and dependent modules -- multiple security vulnerabilities
2017-06-15 00:00:00

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

7.2

Confidence

High

EPSS

0.009

Percentile

83.2%

JSON
Related for CVE-2015-7686
ubuntucve1mageia1debiancve1openvas6prion1cvelist1nvd1nessus7fedora2debian3freebsd1