{"id":"CVE-2026-115865","aliases":[],"cve":{"records":[{"id":"CVE-2026-115865","source":"CPANSec","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-23T17:37:33.627Z","published":"2026-10-30T12:44:06.034Z","modified":"2026-10-30T12:44:06.034Z"}],"publishers":[{"name":"CPANSec","role":"CNA","organizationId":"9b29abf9-4ab0-4765-b253-1875cd9b441e","modified":"2026-10-30T12:44:06.034Z"}],"references":[{"url":"https://github.com/kazuho/Starlet/commit/598947ac620fd31b390335c683d79fa244770782.patch","tags":["patch"],"source":"CPANSec"},{"url":"https://metacpan.org/release/KAZUHO/Starlet-0.33/changes","tags":["release-notes"],"source":"CPANSec"}],"weaknesses":[{"id":"CWE-789","description":"CWE-789 Memory Allocation with Excessive Size Value","source":"CPANSec"}],"applicability":[],"prioritization":[]},"title":"Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting memory","titleSource":"CPANSec","descriptionSource":"CPANSec","description":"Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting memory.\n\nThe request body is read in a loop that asks sysread for all of the remaining declared length at once. Perl grows the read buffer to that size before any data arrives, so a length larger than available memory makes the worker exit with an uncatchable out of memory error before the application is called.\n\nA remote attacker can force a worker restart with each request of a few bytes.","score":null,"severity":"unknown","published":"2026-10-30T12:44:06.034Z","modified":"2026-10-30T12:44:06.034Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"","name":"Starlet","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"0.33","versionType":"custom"}],"defaultStatus":"unaffected","packageURL":"pkg:cpan/Starlet","cpes":[],"source":"CPANSec","url":"https://www.cve.org/CVERecord?id=CVE-2026-115865"}],"remediation":[{"text":"Upgrade to Starlet 0.33 or later.","source":"CPANSec","url":"https://www.cve.org/CVERecord?id=CVE-2026-115865"}],"references":["https://github.com/kazuho/Starlet/commit/598947ac620fd31b390335c683d79fa244770782.patch","https://metacpan.org/release/KAZUHO/Starlet-0.33/changes"],"sources":[{"name":"CVE","id":"CVE-2026-115865","modified":"2026-10-30T12:44:06.034Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-115865"}],"assessments":[],"sourceAffected":[],"observedAt":"2026-10-30T13:08:38.243Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T06:15:31.892Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-30T13:20:34.281Z","attemptedAt":"2026-10-30T13:20:34.281Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-10-30T13:20:34.424Z","attemptedAt":"2026-10-30T13:20:34.424Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-30T13:20:34.664Z","attemptedAt":"2026-10-30T13:20:34.664Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-10-30T13:20:34.486Z","attemptedAt":"2026-10-30T13:20:34.486Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-115865","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-115865","modified":"2026-10-30T13:18:30.947","checkedAt":"2026-10-30T13:20:34.281Z"},{"source":"ENISA EUVD","id":"EUVD-2026-113906","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-113906","modified":"Oct 30, 2026, 12:44:06 PM","checkedAt":"2026-10-30T13:20:34.664Z"}],"aiSummary":{"text":"Starlet versions before 0.33 for Perl are vulnerable to memory exhaustion. A remote attacker can kill a worker by sending a request with a large Content-Length, causing the worker to exit with an out of memory error. The request body is read in a loop, growing the read buffer to the declared size before data arrives.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T13:11:04.041Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-115865"}]}}