Debian/poco: critical 9.8
UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert() and Poco::UTF32::queryConvert() may return a negative in
Action: Upgrade poco to 1.13.0-6 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.13.0-6 | - |
Fixed versions
| 1.13.0-6 |
Sources
- osv: DEBIAN-CVE-2023-52389#Debian:13/poco
- https://security-tracker.debian.org/tracker/CVE-2023-52389
published · modified · JSON