Perl HTTP::Body vulnerable to quadratic-time trailer parsing
HTTP::Body versions before 1.24_02 for Perl parse the trailer in quadratic time.
50
HTTP::Body versions before 1.24_02 for Perl parse the trailer in quadratic time.
Three named flaws cover unlimited form parts, leftover multipart temp files, and quadratic CPU use; the note is cut off.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.5K readers · 2.4K views · 768 reads · all time 189K views