CVE-2016-15059

Name of the Vulnerable Software and Affected Versions Net::IDN::Punycode versions prior to 2.301

Description A heap buffer overflow occurs in the encode punycode() function when using the XS backend. The issue arises because the XS backend constructs the encoded label in a string buffer sized based on the input length. While the loop emitting digits of each code point generally checks for available space, it fails to do so when writing the last digit of each round and the terminating NUL character. Consequently, an input that fills the buffer causes writes to occur past the buffer boundary, leading to heap corruption when encoding an attacker-supplied string.

Recommendations Update Net::IDN::Punycode to version 2.301 or later.