Wind River Support Network

HomeDefectsLIN5-19543
Fixed

LIN5-19543 : Security Advisory - perl - CVE-2014-4330

Created: Oct 14, 2014    Updated: Dec 19, 2017
Resolved Date: Jan 8, 2015
Found In Version: 5.0.1.22
Fix Version: 5.0.1.23
Severity: Standard
Applicable for: Wind River Linux 5
Component/s: Userspace

Description

The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a denial of service (stack consumption and crash) via an Array-Reference with many nested Array-References, which triggers a large number of recursive calls to the DD_dump function.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-4330

Other Downloads


Live chat
Online