AZL-103320
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-103320.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-103320
- Upstream
- Published
- 2026-09-19T16:16:32Z
- Modified
- 2026-09-20T14:16:34Z
- Summary
- CVE-2026-82560 affecting package perl 5.38.2-516
- Details
-
Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width.
Each =over adds its indent to the margin, which wrap() subtracts from the output width to get the space available for text. When that space reaches zero, the line-splitting substitution matches the empty string, and the loop consumes no input while appending the margin padding on every pass.
Formatting an attacker-supplied POD document never returns, and the output grows until memory is exhausted.
- References