Debian/libcrypt-urandom-perl: high 7.5
Crypt::URandom versions from 0.41 before 0.55 for Perl is vulnerable to a heap buffer overflow in the XS function crypt_urandom_getrandom(). The function does not validate that the length parameter is
Action: Upgrade libcrypt-urandom-perl to 0.54-1+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.54-1+deb13u1 | - |
Fixed versions
| 0.54-1+deb13u1 |
Sources
published · modified · JSON