CVE-2014-4330

Name of the Vulnerable Software and Affected Versions Data::Dumper versions prior to 2.154 Perl 5 versions prior to 5.20.1

Description The issue allows context-dependent attackers to cause a denial of service, resulting in stack consumption and crash, by utilizing an Array-Reference with many nested Array-References. This triggers a large number of recursive calls to the DD dump function.

Recommendations For Data::Dumper versions prior to 2.154, update to version 2.154 or later to resolve the issue. For Perl 5 versions prior to 5.20.1, update to version 5.20.1 or later to resolve the issue.