perl-MIME-tools vulnerabilities (openSUSE)
10 vulnerabilities.
-
perl-MIME-toolsopenSUSE MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustion 7.5 High -
perl-MIME-toolsopenSUSE MIME::Field::ParamVal versions before 5.521 for Perl do not flag a duplicate boundary parameter whose name contains a nested comment 5.3 Medium -
perl-MIME-toolsopenSUSE MIME::Parser::FileUnder versions before 5.521 for Perl reuse a pre-created output directory and follow symlinks in it, letting local users redirect attachment writes 7.0 High -
perl-MIME-toolsopenSUSE MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decode_mimewords 7.5 High -
perl-MIME-toolsopenSUSE MIME::Field::ParamVal versions before 5.521 for Perl turn an RFC 2231 filename with a hyphenated language tag into an empty recommended filename 5.3 Medium -
perl-MIME-toolsopenSUSE MIME::Field::ParamVal versions before 5.521 for Perl allow CPU exhaustion via unclosed comments in header parameters 7.5 High -
perl-MIME-toolsopenSUSE MIME::Parser versions before 5.521 for Perl allow memory exhaustion via indented error messages from a truncated, deeply nested message 7.5 High -
perl-MIME-toolsopenSUSE MIME::Head versions from 5.518 before 5.521 for Perl decode a partly encoded multipart boundary without flagging the parse as ambiguous 5.3 Medium -
perl-MIME-toolsopenSUSE MIME::Field::ParamVal versions before 5.521 for Perl do not flag an ambiguous multipart boundary written as RFC 2231 continuations 5.3 Medium -
perl-MIME-toolsopenSUSE MIME::Field::ParamVal versions before 5.521 for Perl allow one invalid Content-Type parameter to hide the parameters after it, including the multipart boundary 5.3 Medium