CVEvulnerability
CVE-2014-1474
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-07-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-189
Description
Algorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0 through 4.2.2, allows remote attackers to cause a denial of service (CPU consumption) via a string without an address.
Affected configurations
• bestpractical rt 4.2.0
• bestpractical rt 4.2.1
• bestpractical rt 4.2.2
• email\ \ address\ (<= 0.01)
Related
Weakness · not in database (1)
Referenced by CWE · observed example (1)
- CWE-407 Inefficient Algorithmic Complexity weakness
References
- http://blog.bestpractical.com/2014/01/security-vulnerability-in-rt-42.html Vendor Advisory
- http://lists.bestpractical.com/pipermail/rt-announce/2014-June/000257.html Patch, Vendor Advisory
- https://metacpan.org/changes/release/ALEXMV/Email-Address-List-0.02 Patch
- http://blog.bestpractical.com/2014/01/security-vulnerability-in-rt-42.html Vendor Advisory
- http://lists.bestpractical.com/pipermail/rt-announce/2014-June/000257.html Patch, Vendor Advisory
- https://metacpan.org/changes/release/ALEXMV/Email-Address-List-0.02 Patch