perl-HTTP-Body vulnerabilities (openSUSE)
11 vulnerabilities.
-
perl-HTTP-BodyopenSUSE HTTP::Body versions before 1.24_02 for Perl parse the trailer in quadratic time No score -
perl-HTTP-BodyopenSUSE HTTP::Body versions before 1.24_01 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies 7.5 High -
perl-HTTP-BodyopenSUSE HTTP::Body versions before 1.24_01 for Perl allow CPU exhaustion via regex backtracking on the filename of a multipart upload 7.5 High -
perl-HTTP-BodyopenSUSE HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk 9.1 Critical -
perl-HTTP-BodyopenSUSE HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies 7.5 High -
perl-HTTP-BodyopenSUSE HTTP::Body versions before 1.23_01 for Perl drop mixed-case percent escapes from urlencoded form fields instead of decoding them 9.8 Critical -
perl-HTTP-BodyopenSUSE HTTP::Body versions before 1.23_01 for Perl allow memory exhaustion via an unbounded multipart part header block 7.5 High -
perl-HTTP-BodyopenSUSE HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic rescanning of a multipart body with a missing or malformed boundary 7.5 High -
perl-HTTP-BodyopenSUSE HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on disk 7.1 High -
perl-HTTP-BodyopenSUSE HTTP::Body versions before 1.23_01 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and multipart parts 6.5 Medium -
perl-HTTP-BodyopenSUSE HTTP::Body::Multipart in the HTTP-Body 1.08, 1.17, and earlier module for Perl uses the part of... 6.8 Medium