CVE-2018-12558

Name of the Vulnerable Software and Affected Versions Email::Address module versions through 1.909

Description The issue concerns the parse() method in the Email::Address module, which is susceptible to algorithmic complexity when processing specially prepared input. This can lead to a Denial of Service. The problematic input contains 30 form-field characters (f).

Recommendations For Email::Address module versions through 1.909, consider restricting the use of the parse() method until a patch is available. As a temporary workaround, avoid using the parse() method with untrusted input to minimize the risk of exploitation.