CVE-2018-12558

The CVE-2018-12558 issue affects the Perl Email::Address module (versions up to 1.909) and arises from an algorithmic complexity vulnerability in Address.pm that lets an attacker cause CPU-based Denial of Service with specially crafted input (notably a string containing 30 form-field characters, ...

CVE-2014-0477

CVE-2014-0477 affects the Perl Email::Address module prior to version 1.905, where an inefficient regular expression in the RFC 2822 address parser allows a remote attacker to trigger CPU consumption and deny service. Public advisories (Fedora, openSUSE, Mandriva/MDVSA, RedHat, Debian) document u...

CVE-2014-4720

CVE-2014-4720 and CVE-2014-0477 affect the Perl Email::Address module. The issues stem from an inefficient regular expression in the module parsing RFC 2822 addresses, enabling denial of service via CPU consumption (backtracking into the phrase for CVE-2014-4720; empty quoted string for CVE-2014-...