The parse() method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial of Service.
CVSS 3.0HIGH 7.5·Network·No auth·No interaction·EPSS 0.02631·Published 2018-06-20·Will not fixCWE-407
The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service (CPU consumption) via an empty quoted string in an RFC…
CVSS 2.0MEDIUM 5.0·Network·No auth·Interaction —·EPSS 0.03584·Published 2014-07-03·Will not fix
Email::Address module before 1.904 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service (CPU consumption) via vectors related to "backtracking into the phrase," a di…
Algorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0 through 4.2.2, allows remote attackers to cause a denial of service (CPU consumption) via a string without an address.