Threats affecting pkg:cpan/Starlet

Starlet versions from 0.20 up to but not including 0.33 for Perl contain a vulnerability where unbounded buffering during decoding of chunked request bodies can lead to memory exhaustion. The decoder accumulates input without limits, allowing a remote attacker to exhaust a worker's memory with a single crafted request. This issue is fixed in version 0.33.

Starlet versions before 0.33 for Perl improperly send a body in responses to HEAD requests, causing corruption of subsequent responses on persistent or pipelined HTTP connections. This behavior can desynchronize proxies sharing connections across clients due to extra bytes being misinterpreted as the start of new responses. The issue is fixed in version 0.33.

Starlet versions from 0.20 up to but not including 0.33 for Perl contain an inefficient regular expression that can cause CPU exhaustion when decoding chunked request bodies. The flaw arises from a regex backtracking issue in parsing chunk-size lines, allowing a remote attacker to cause high CPU usage with a specially crafted request. This can occupy a worker thread for about a minute using a single 128 KiB request. The issue is fixed in version 0.33.

Starlet versions before 0.33 for Perl contain a vulnerability where a remote attacker can send a request with a large Content-Length header, causing the worker process to exhaust memory and exit with an uncatchable error. This leads to a denial of service by forcing worker restarts with minimal requests.