ALT-PU-2018-1106-1
Closed vulnerabilities
Published: 2017-08-01
BDU:2017-02409
Уязвимость функции decode_digit (puny_decode.c) библиотеки Libidn2, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие
Severity: CRITICAL (9.8)
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
Published: 2016-09-07
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2016-6261
The idna_to_ascii_4i function in lib/idna.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via 64 bytes of input.
Severity: HIGH (7.5)
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
- http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=f20ce1128fb7f4d33297eee307dddaf0f92ac72d
- http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=f20ce1128fb7f4d33297eee307dddaf0f92ac72d
- openSUSE-SU-2016:2135
- openSUSE-SU-2016:2135
- DSA-3658
- DSA-3658
- [oss-security] 20160720 CVE request: multiple issues fixed in GNU libidn 1.33
- [oss-security] 20160720 CVE request: multiple issues fixed in GNU libidn 1.33
- [oss-security] 20160721 Re: CVE request: multiple issues fixed in GNU libidn 1.33
- [oss-security] 20160721 Re: CVE request: multiple issues fixed in GNU libidn 1.33
- 92070
- 92070
- USN-3068-1
- USN-3068-1
- [bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
- [bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
- [bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
- [bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
- [help-libidn] 20150709 out of bounds stack read in function idna_to_ascii_4i
- [help-libidn] 20150709 out of bounds stack read in function idna_to_ascii_4i
- [help-libidn] 20160720 Libidn 1.33 released
- [help-libidn] 20160720 Libidn 1.33 released
Published: 2016-09-07
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2016-6263
The stringprep_utf8_nfkc_normalize function in lib/nfkc.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted UTF-8 data.
Severity: HIGH (7.5)
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
- http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=1fbee57ef3c72db2206dd87e4162108b2f425555
- http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=1fbee57ef3c72db2206dd87e4162108b2f425555
- openSUSE-SU-2016:1924
- openSUSE-SU-2016:1924
- openSUSE-SU-2016:2135
- openSUSE-SU-2016:2135
- DSA-3658
- DSA-3658
- [oss-security] 20160720 CVE request: multiple issues fixed in GNU libidn 1.33
- [oss-security] 20160720 CVE request: multiple issues fixed in GNU libidn 1.33
- [oss-security] 20160721 Re: CVE request: multiple issues fixed in GNU libidn 1.33
- [oss-security] 20160721 Re: CVE request: multiple issues fixed in GNU libidn 1.33
- 92070
- 92070
- USN-3068-1
- USN-3068-1
- [bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
- [bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
- [bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
- [bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8
- [help-libidn] 20160720 Libidn 1.33 released
- [help-libidn] 20160720 Libidn 1.33 released
- GLSA-201908-06
- GLSA-201908-06
Published: 2017-08-31
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2017-14062
Integer overflow in the decode_digit function in puny_decode.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.
Severity: CRITICAL (9.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
- DSA-3988
- DSA-3988
- https://gitlab.com/libidn/libidn2/blob/master/NEWS
- https://gitlab.com/libidn/libidn2/blob/master/NEWS
- https://gitlab.com/libidn/libidn2/commit/3284eb342cd0ed1a18786e3fcdf0cdd7e76676bd
- https://gitlab.com/libidn/libidn2/commit/3284eb342cd0ed1a18786e3fcdf0cdd7e76676bd
- [debian-lts-announce] 20180727 [SECURITY] [DLA 1447-1] libidn security update
- [debian-lts-announce] 20180727 [SECURITY] [DLA 1447-1] libidn security update
Closed bugs
Incompatible with current ovz-el kernel