The host is installed with Active Perl and is prone to denial of service vulnerability.

Successful exploitation will allow attackers to cause denial of service (memory consumption) via specially-crafted hash key. Impact Level: Application

Upgrade to Active Perl version 5.16.3 or 5.14.4 or later, For updates refer to http://www.perl.org/get.html

Flaw is due to an error when rehashing user-supplied input.

Active Perl versions 5.8.2 before 5.14.4 and 5.15 before 5.16.3 on Windows

• http://osvdb.org/90892
• http://perlnews.org/2013/03/perl-5-16-3-and-5-14-4-just-released
• http://perlnews.org/2013/03/rehashing-flaw
• http://secunia.com/advisories/52472
• http://www.nntp.perl.org/group/perl.perl5.porters/2013/03/msg199755.html

---

Updated on 2015-03-25