Lucene search

K
freebsdFreeBSD4CAF01E2-30E6-11E5-A4A5-002590263BF5
HistoryFeb 09, 2015 - 12:00 a.m.

libidn -- out-of-bounds read issue with invalid UTF-8 input

2015-02-0900:00:00
vuxml.freebsd.org
8

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.8%

Simon Josefsson reports:

stringprep_utf8_to_ucs4 now rejects invalid UTF-8. This function
has always been documented to not validate that the input UTF-8
string is actually valid UTF-8…

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchlibidn< 1.31UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.8%