CVE-2016-15059: Net::IDN::Punycode versions before 2.301 for Perl allow a heap buffer overflow via unchecked writes past the output buffer in encode_punycode
Perl Net::IDN::Punycode before 2.301 has a heap buffer overflow in encode_punycode, tracked as CVE-2016-15059.
Paul Johnson reported on oss-security that Perl Net::IDN::Punycode before version 2.301 is affected by CVE-2016-15059. The bug is a heap buffer overflow from unchecked writes past the output buffer in encode_punycode, in the Net-IDN-Encode distribution. The notice does not report exploitation in the wild.
- CVE-2016-15059 affects Net::IDN::Punycode before version 2.301.
- Unchecked writes in encode_punycode overflow the heap output buffer.
- Posted to oss-security; no active exploitation is reported.
- CVEs
- CVE-2016-15059
- Products
- Net::IDN::PunycodeNet-IDN-Encode
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2016-15059 | Heap Buffer Overflow in Perl Net::IDN::Punycode XS Backend | 9.8 | — |
From the original article
Posted by Paul Johnson on Sep 22 ======================================================================== https://metacpan. org/dist/Net-IDN-Encode https://github. com/robrwo/Net-IDN-Encode Net::IDN::Punycode...
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.