perl-Net-IDN-Encode vulnerabilities (openSUSE)
7 vulnerabilities.
-
perl-Net-IDN-EncodeopenSUSE Net::IDN::Punycode versions before 2.590 for Perl hang, crash or return a wrong label via unvalidated malformed UTF-8 in encode_punycode 7.5 High -
perl-Net-IDN-EncodeopenSUSE Net::IDN::UTS46 versions before 2.590 for Perl allow CPU exhaustion via quadratic punycode encoding of an overlong label before the length check in to_ascii 7.5 High -
perl-Net-IDN-EncodeopenSUSE Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decode_punycode 9.1 Critical -
perl-Net-IDN-EncodeopenSUSE Net::IDN::Punycode versions before 2.590 for Perl allow CPU exhaustion via quadratic insertion cost when decoding a long label in decode_punycode 7.5 High -
perl-Net-IDN-EncodeopenSUSE Net::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the output buffer on every rejected label in decode_punycode 9.1 Critical -
perl-Net-IDN-EncodeopenSUSE Net::IDN::Punycode versions from 2.301 before 2.590 for Perl allow a heap use-after-free via a decoded code point that reallocates the output buffer in decode_punycode 8.4 High -
perl-Net-IDN-EncodeopenSUSE Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encode_punycode 6.5 Medium