PT-2014-5814
CVE-2014-4330
·
تاريخ النشر
2014-09-30
·
تاريخ التحديث
2018-10-09
الوصف من
CVSS 2.0
2.1
منخفضةالمقاييسAV:L/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
Data::Dumper versions prior to 2.154
Perl 5 versions prior to 5.20.1
Description
The issue allows context-dependent attackers to cause a denial of service, resulting in stack consumption and crash, by utilizing an Array-Reference with many nested Array-References. This triggers a large number of recursive calls to the DD dump function.
Recommendations
For Data::Dumper versions prior to 2.154, update to version 2.154 or later to resolve the issue.
For Perl 5 versions prior to 5.20.1, update to version 5.20.1 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾