CVE-2014-4720: Email::Address module before 1.904 for Perl uses an inefficient regular expression, which allows remote att...

Security readout for executives and security teams

This flaw affects the Perl Email::Address module before 1.904. A specially formed email address can make parsing consume excessive CPU, causing denial of service. The sources do not indicate data theft, code execution, or confirmed real-world exploitation. Exposure is most likely in Perl applications that use Email::Address before 1.904 to parse email addresses from untrusted sources, such as inbound mail, forms, APIs, or imports. The provided affected-product metadata is incomplete. Treat as a targeted availability risk, not a breach indicator. Prioritize remediation for internet-facing or high-volume workflows that parse user-supplied email addresses. Lower urgency if the module is absent or only handles trusted internal data. Mitigation focus: Inventory Perl dependencies for Email::Address versions before 1.904.; Upgrade Email::Address to 1.904 or later where compatible.; Check distribution or vendor package guidance for supported fixed builds..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.