Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers to cause a denial of service (stack consumption and crash) via an Array-Reference with many nested Array-References, which triggers a large number of recursive calls to the DD_dump function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Perl Data::Dumper 缓冲区溢出漏洞
Vulnerability Description
Perl是美国程序员拉里-沃尔（Larry Wall）所研发的一种免费且功能强大的跨平台编程语言。Data::Dumper是其中的一个模块，它的主要作用是通过给定一个标量、数组、哈希或引用作为参数，将以Perl语法的方式返回这个数据的内容。 Perl 5.14.2及之前版本中使用的Data::Dumper 2.151及之前版本中的Dumper方法中存在安全漏洞。攻击者可通过在带有大量嵌套Array-References的Array-References利用该漏洞造成拒绝服务（栈消耗和崩溃）。
CVSS Information
N/A
Vulnerability Type
N/A