9 matches found
eml_parser vulnerable to DoS via deeply nested parens in Received headers
Summaryemlparser strips parenthesised CFWS comments from Received: headers using a regex-based fix-point loop. The loop has quadratic time complexity in the number of nested parens. A single Received: header containing 5,000 nested parens causes 1.3 seconds of CPU saturation per parsed message;...
7.5CVSS5.7AI score0.0063EPSS
SaveExploits0References8Affected Software1
20