Lucene search

K
redosRedosROS-20240603-02
HistoryJun 03, 2024 - 12:00 a.m.

ROS-20240603-02

2024-06-0300:00:00
redos.red-soft.ru
2
mojolicious
perl
vulnerability
denial-of-service
manipulation
timing mismatch
resource release
secure compare
remote attack
secret string length
unix

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

A vulnerability in the Format Detection component of the Mojolicious module for Perl is related to errors in releasing
resources. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of
denial of service

A vulnerability in the secure_compare() function of the Mojolicious for Perl module is related to manipulation of unknown
input resulting in a timing mismatch vulnerability. Exploitation of the vulnerability could allow
an attacker acting remotely to guess the length of a secret string

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64perl-mojolicious<= 9.19-1UNKNOWN

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%