Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-4720HistoryOct 03, 2022 - 4:20 p.m.
CVE-2014-4720
2022-10-0316:20:46
Debian Security Bug Tracker
security-tracker.debian.org
9
cve-2014-4720
email::address
denial of service
cpu consumption
perl
regular expression
remote attackers
backtracking
vulnerability
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.039 Low
EPSS
Percentile
92.0%
Email::Address module before 1.904 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service (CPU consumption) via vectors related to “backtracking into the phrase,” a different vulnerability than CVE-2014-0477.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libemail-address-perl | < 1.905-1 | libemail-address-perl_1.905-1_all.deb |
| Debian | 11 | all | libemail-address-perl | < 1.905-1 | libemail-address-perl_1.905-1_all.deb |
| Debian | 999 | all | libemail-address-perl | < 1.905-1 | libemail-address-perl_1.905-1_all.deb |
| Debian | 13 | all | libemail-address-perl | < 1.905-1 | libemail-address-perl_1.905-1_all.deb |
Related
securityvulns
securityvulns
[ MDVSA-2014:192 ] perl-Email-Address
2014-10-14 00:00:00
perl-Email-Address DoS
2014-10-14 00:00:00
osv
osv
libemail-address-perl - security update
2014-06-27 00:00:00
libemail-address-perl - security update
2014-06-29 00:00:00
cvelist
cvelist
CVE-2014-4720
2022-10-03 16:20:46
CVE-2014-0477
2014-07-03 17:00:00
ubuntucve
ubuntucve
CVE-2014-4720
2014-07-06 00:00:00
CVE-2014-0477
2014-07-03 00:00:00
nessus
nessus
Debian DSA-2969-1 : libemail-address-perl - security update
2014-06-28 00:00:00
Mandriva Linux Security Advisory : perl-Email-Address (MDVSA-2014:192)
2014-10-02 00:00:00
Fedora 20 : perl-Email-Address-1.905-1.fc20 (2014-7613)
2014-09-29 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2969-1)
2014-06-26 00:00:00
Mageia: Security Advisory (MGASA-2014-0389)
2022-01-28 00:00:00
Fedora Update for perl-Email-Address FEDORA-2014-7610
2014-10-01 00:00:00
prion
prion
Design/Logic Flaw
2014-07-06 23:55:00
Code injection
2014-07-03 17:55:00
nvd
nvd
CVE-2014-4720
2014-07-06 23:55:02
CVE-2014-0477
2014-07-03 17:55:05
cve
cve
CVE-2014-4720
2022-10-03 16:20:46
CVE-2014-0477
2014-07-03 17:55:05
mageia
mageia
Updated perl-Email-Address packages fix security vulnerabilities
2014-09-26 19:55:04
debian
debian
libemail-address-perl security update
2014-06-29 19:09:32
[SECURITY] [DSA 2969-1] libemail-address-perl security update
2014-06-27 18:27:42
[SECURITY] [DSA 2969-1] libemail-address-perl security update
2014-06-27 18:27:42
debiancve
debiancve
CVE-2014-0477
2014-07-03 17:55:05
fedora
fedora
[SECURITY] Fedora 19 Update: perl-Email-Address-1.905-1.fc19
2014-09-26 09:00:57
[SECURITY] Fedora 20 Update: perl-Email-Address-1.905-1.fc20
2014-09-26 09:03:08
zdt
zdt
TP-LINK WDR4300 XSS / Denial Of Service Vulnerabilities
2014-09-23 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.039 Low
EPSS
Percentile
92.0%
Related for DEBIANCVE:CVE-2014-4720