CVE-2026-114629
- Source
- https://cve.org/CVERecord?id=CVE-2026-114629
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-114629.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2026-114629
- Downstream
- Published
- 2026-10-24T13:50:47Z
- Modified
- 2026-10-25T02:45:53Z
- Summary
- Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters
- Details
-
Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters.
Web::Dispatch::ParamParser::get_unpacked_body_from reads an application/x-www-form-urlencoded body using a single read call, with no cap and the return value ignored. Perl's read grows the buffer to the requested length before reading, so the declared Content-Length determines the allocation.
An attacker can trigger this through any route whose dispatch specification has a % body-parameter match, such as sub (POST + %name=), sending a Content-Length far larger than the body actually sent. No authentication is involved.
- Database specific
{ "cna_assigner": "CPANSec", "cwe_ids": [ "CWE-789" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/114xxx/CVE-2026-114629.json" }- References
-
- http://www.openwall.com/lists/oss-security/2026/10/24/4
- https://cpan.org/modules
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/114xxx/CVE-2026-114629.json
- https://github.com/p5sagit/Web-Simple
- https://github.com/p5sagit/Web-Simple/commit/7e02c4f6204a2898938d357e6efe6dc2679af695.patch
- https://metacpan.org/release/ETHER/Web-Simple-0.035/changes
- https://nvd.nist.gov/vuln/detail/CVE-2026-114629
Affected packages
Git / github.com/p5sagit/web-simple
Affected ranges
- Type
- GIT
- Repo
- https://github.com/p5sagit/web-simple
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "0" }, { "fixed": "0.035" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" }, { "range": [ { "fixed": "7e02c4f6204a2898938d357e6efe6dc2679af695" } ], "source": "REFERENCES_COMMIT" } ] }