{"action":"Upgrade libsmi to 0.4.8+dfsg2-3 or later.","affected":[{"fixed":"0.4.8+dfsg2-3","introduced":"0"}],"component":"libsmi","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["0.4.8+dfsg2-3"],"id":"tcs_01M5N9KCNC3SEDKS79C2BA6MTS","modified_at":"2026-10-23T17:47:50.595379677Z","published_at":"2010-10-28T00:00:02.313Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2010-2891","https://security-tracker.debian.org/tracker/CVE-2010-2891"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2010-2891#Debian:13/libsmi","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2010-2891"}],"summary":"Buffer overflow in the smiGetNode function in lib/smi.c in libsmi 0.4.8 allows context-dependent attackers to execute arbitrary code via an Object Identifier (aka OID) represented as a numerical strin"}