CyberRota Analysis
AI-GeneratedVersions of Pod::Text prior to 6.1.1 for Perl are vulnerable to a denial-of-service condition due to CPU and memory exhaustion when processing a specially crafted POD document with excessive nesting. This flaw allows an attacker to create a document that causes infinite loops in formatting, leading to resource exhaustion on the affected system. Organizations using affected versions of Pod::Text should prioritize patching to mitigate the risk of service disruption.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which wrap() subtracts from the output width to get the space available for text. When that space reaches zero, the line-splitting substitution matches the empty string, and the loop consumes no input while appending the margin padding on every pass. Formatting an attacker-supplied POD document never returns, and the output grows until memory is exhausted.