Wind River Support Network


LIN5-19543 : Security Advisory - perl - CVE-2014-4330

Created: Oct 14, 2014    Updated: Dec 19, 2017
Resolved Date: Jan 8, 2015
Found In Version:
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 5
Component/s: Userspace


The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a denial of service (stack consumption and crash) via an Array-Reference with many nested Array-References, which triggers a large number of recursive calls to the DD_dump function.

Other Downloads

Live chat