ALT-PU-2015-2098-1
Closed vulnerabilities
Published: 2015-08-12
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2015-2059
The stringprep_utf8_to_ucs4 function in libin before 1.31, as used in jabberd2, allows context-dependent attackers to read system memory and possibly have other unspecified impact via invalid UTF-8 characters in a string, which triggers an out-of-bounds read.
Severity: HIGH (7.5)
References:
- http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=2e97c279
- http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=2e97c279
- FEDORA-2015-11621
- FEDORA-2015-11621
- FEDORA-2015-11562
- FEDORA-2015-11562
- openSUSE-SU-2015:1261
- openSUSE-SU-2015:1261
- openSUSE-SU-2016:2135
- openSUSE-SU-2016:2135
- DSA-3578
- DSA-3578
- [oss-security] 20150223 Re: CVE Request: jabberd remote information disclosure
- [oss-security] 20150223 Re: CVE Request: jabberd remote information disclosure
- 72736
- 72736
- USN-3068-1
- USN-3068-1
- https://github.com/jabberd2/jabberd2/issues/85
- https://github.com/jabberd2/jabberd2/issues/85