Debian/libnet-idn-encode-perl: critical 9.8
Net::IDN::Punycode versions before 2.301 for Perl allow a heap buffer overflow via unchecked writes past the output buffer in encode_punycode. The XS backend builds the encoded label in the string buf
Action: Upgrade libnet-idn-encode-perl to 2.303-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.303-1 | - |
Fixed versions
| 2.303-1 |
Sources
- osv: DEBIAN-CVE-2016-15059#Debian:14/libnet-idn-encode-perl
- https://security-tracker.debian.org/tracker/CVE-2016-15059
published · modified · JSON