VDB

GCVE-110-MAGEIA-2014-389

GCVE-110-MAGEIA-2014-389
Advisory Published
Vulnetix · Advisory published September 26, 2014
Updated perl-Email-Address package fixes security vulnerability: The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service (CPU consumption) via an empty quoted string in an RFC 2822 address (CVE-2014-0477). The Email::Address module before 1.904 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service (CPU consumption) via vectors related to "backtracking into the phrase" (CVE-2014-4720).

Affected Products

VendorProductVersionsPlatforms
Mageiaperl-Email-Address0 (affected), 1.905.0-1.mga4 (unaffected)
Mageiaperl-Email-Address1.905.0-1.mga3 (unaffected), 0 (affected)

Browse GCVE Records

72,148 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›