Lucene search

K
mageiaGentoo FoundationMGASA-2015-0349
HistorySep 08, 2015 - 8:55 p.m.

Updated libidn packages fix CVE-2015-2059

2015-09-0820:55:59
Gentoo Foundation
advisories.mageia.org
6

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.8%

Updated libidn packages fix security vulnerability: In libidn before 1.31, stringprep_utf8_to_ucs4 did not validate that the input UTF-8 string was actually valid UTF-8, which could lead to out-of-bounds reads (CVE-2015-2059).

OSVersionArchitecturePackageVersionFilename
Mageia5noarchlibidn< 1.32-1libidn-1.32-1.mga5

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.8%