libnet-idn-encode-perl vulnerabilities (Debian)
8 vulnerabilities.
-
libnet-idn-encode-perlDebian Net::IDN::Punycode versions before 2.590 for Perl hang, crash or return a wrong label via unvalidated malformed UTF-8 in encode_punycode 7.5 High -
libnet-idn-encode-perlDebian Net::IDN::UTS46 versions before 2.590 for Perl allow CPU exhaustion via quadratic punycode encoding of an overlong label before the length check in to_ascii 7.5 High -
libnet-idn-encode-perlDebian Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decode_punycode 9.1 Critical -
libnet-idn-encode-perlDebian Net::IDN::Punycode versions before 2.590 for Perl allow CPU exhaustion via quadratic insertion cost when decoding a long label in decode_punycode 7.5 High -
libnet-idn-encode-perlDebian Net::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the output buffer on every rejected label in decode_punycode 9.1 Critical -
libnet-idn-encode-perlDebian Net::IDN::Punycode versions from 2.301 before 2.590 for Perl allow a heap use-after-free via a decoded code point that reallocates the output buffer in decode_punycode 8.4 High -
libnet-idn-encode-perlDebian Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encode_punycode 6.5 Medium -
libnet-idn-encode-perlDebian Net::IDN::Punycode versions before 2.301 for Perl allow a heap buffer overflow via unchecked writes past the output buffer in encode_punycode 9.8 Critical