cve/2014/CVE-2014-4330.md

CVE-2014-4330

Description

The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a denial of service (stack consumption and crash) via an Array-Reference with many nested Array-References, which triggers a large number of recursive calls to the DD_dump function.

POC

Reference

• http://packetstormsecurity.com/files/128422/Perl-5.20.1-Deep-Recursion-Stack-Overflow.html
• http://seclists.org/fulldisclosure/2014/Sep/84
• http://seclists.org/oss-sec/2014/q3/692

Github

No PoCs found on GitHub currently.