PT-2021-30836 · Mageia · Perl-Email-Mime+1

Published 2021-02-10 · Updated 2021-02-10

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions No specific software name or version is mentioned, so the information cannot be accurately provided.

Description The issue arises from messages containing too many tiny nested MIME parts, which can cause memory exhaustion on split(), resulting in denial of service. This problem can be mitigated by limiting the number of nested MIME parts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2021-0078

Affected Products

Perl-Email-Mime

Perl-Email-Mime-Contenttype

References · 5

• https://osv.dev/vulnerability/MGASA-2021-0078 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/VJFUIVJOQGZOYF4Q4RXPBJTBBZD5LXVK · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/3PWODHVD5ZKQBY2OYBTFPBETUOOJA33D · Vendor Advisory
• https://advisories.mageia.org/MGASA-2021-0078.html · Security Note
• https://bugs.mageia.org/show_bug.cgi?id=26757 · Note