CVE-2014-1474
EPSS 0.53%
Description
Algorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0 through 4.2.2, allows remote attackers to cause a denial of service (CPU consumption) via a string without an address.
How to fix CVE-2014-1474
To remediate CVE-2014-1474, upgrade the affected package to a fixed version below.
- Debian/libemail-address-list-perl—upgrade to 0.03-1 or later
Is CVE-2014-1474 being exploited?
Low — EPSS is 0.5%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 0.03-1