CVE-2014-0477: The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular expression, w...

Security readout for executives and security teams

CVE-2014-0477 is a denial-of-service issue in the Perl Email::Address module. Systems that parse attacker-supplied email addresses with versions before 1.905 may burn excessive CPU, potentially slowing mail or web workflows that rely on address parsing. Exposure is most likely in Perl applications, mail-processing services, ticketing systems, or web forms using Email::Address before 1.905 on untrusted address input. The provided affected-product metadata is incomplete, so confirm through dependency and package inventories. Treat as a contained availability risk. Prioritize systems that process public email or form input, especially if they support customer support, billing, or operational alerting. It is not evidenced as actively exploited in the supplied sources. Mitigation focus: Upgrade Email::Address to version 1.905 or later where directly vendored.; Apply distribution security updates for packaged Perl Email::Address dependencies.; Identify services parsing untrusted email headers or submitted address fields..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.