CVE-2014-4330 in Data Dumper
Summary
The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a denial of service (stack consumption and crash) via an Array-Reference with many nested Array-References, which triggers a large number of recursive calls to the DD_dump function.
Reservation
06/18/2014
Disclosure
09/30/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 71694 | Data Dumper memory corruption | 119 | Proof-of-Concept | Not defined | CVE-2014-4330 |