CVE-2026-87768
— UNSCOREDPublished 2026-10-30 · Updated 2026-10-30
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds. _normalize_leap_seconds crosses day boundaries one day at a time, so add(seconds => $n) on an object with a non-floating time zone takes about |$n|/86400 iterations, and nothing limits $n. The XS implementation and the pure-Perl fallback both have the loop. An attacker who controls the number of seconds added can keep the process busy for as long as they choose.
Weaknesses
CWE-407
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2019-25781PoC
- HIGHCVE-2026-100700PoC
- HIGHCVE-2026-101021PoC
- MEDIUMCVE-2026-102277PoC
- MEDIUMCVE-2026-102461PoC
- HIGHCVE-2026-102994PoC
- HIGHCVE-2026-102997PoC
- HIGHCVE-2026-102999PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.