What’s Vulnerable › Vulnerabilities

CVE-2014-1474

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-07-15 · updated 2026-06-17
• Weakness: CWE-189

Description

Algorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0 through 4.2.2, allows remote attackers to cause a denial of service (CPU consumption) via a string without an address.

Affected products

• bestpractical rt: 4.2.0, 4.2.1, 4.2.2
• Email::Address::List Project Email::Address::List: through 0.01

References

• http://blog.bestpractical.com/2014/01/security-vulnerability-in-rt-42.html
• http://lists.bestpractical.com/pipermail/rt-announce/2014-June/000257.html
• https://metacpan.org/changes/release/ALEXMV/Email-Address-List-0.02
• http://blog.bestpractical.com/2014/01/security-vulnerability-in-rt-42.html
• http://lists.bestpractical.com/pipermail/rt-announce/2014-June/000257.html
• https://metacpan.org/changes/release/ALEXMV/Email-Address-List-0.02

Get alerted when CVE-2014-1474 or the next vulnerability affects your stack