Wind River Support Network

HomeDefectsLIN6-8551
Fixed

LIN6-8551 : Security Advisory - perl - CVE-2014-4330

Created: Oct 14, 2014    Updated: Dec 3, 2018
Resolved Date: Jan 8, 2015
Found In Version: 6.0.0.16
Fix Version: 6.0.0.17
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace

Description

The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a denial of service (stack consumption and crash) via an Array-Reference with many nested Array-References, which triggers a large number of recursive calls to the DD_dump function.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-4330

Other Downloads


Live chat
Online