Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2019-12290
HistoryOct 22, 2019 - 4:15 p.m.

Code injection

2019-10-2216:15:00
PRIOn knowledge base
www.prio-n.com
2

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

8.3 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

71.1%

JSON

GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it possible in some circumstances for one domain to impersonate another. By creating a malicious domain that matches a target domain except for the inclusion of certain punycoded Unicode characters (that would be discarded when converted first to a Unicode label and then back to an ASCII label), arbitrary domains can be impersonated.

CPENameOperatorVersion
libidn2lt2.2.0

References

Related

nessus 15
fedora 5
openvas 13
alpinelinux 1
debiancve 1
osv 1
ubuntucve 1
veracode 1
cve 1
freebsd 1
ubuntu 1
suse 2
amazon 2
gentoo 1
mageia 1
cloudfoundry 1
ics 1
nessus
nessus
EulerOS Virtualization 3.0.2.0 : libidn2 (EulerOS-SA-2023-1735)
2023-05-07 00:00:00
EulerOS Virtualization for ARM 64 3.0.6.0 : libidn2 (EulerOS-SA-2020-1338)
2020-04-02 00:00:00
EulerOS 2.0 SP8 : libidn2 (EulerOS-SA-2020-1161)
2020-02-25 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: libidn2-2.3.0-1.fc31
2019-11-20 01:02:33
[SECURITY] Fedora 30 Update: libidn2-2.3.0-1.fc30
2019-12-09 02:28:54
[SECURITY] Fedora 29 Update: mingw-libidn2-2.3.0-1.fc29
2019-11-25 02:33:41
openvas
openvas
Fedora Update for mingw-libidn2 FEDORA-2019-20e9736c97
2019-11-26 00:00:00
Fedora Update for libidn2 FEDORA-2019-160303ebeb
2019-12-15 00:00:00
Huawei EulerOS: Security Advisory for libidn2 (EulerOS-SA-2023-1735)
2023-05-08 00:00:00
alpinelinux
alpinelinux
CVE-2019-12290
2019-10-22 16:15:00
debiancve
debiancve
CVE-2019-12290
2019-10-22 16:15:00
osv
osv
CVE-2019-12290
2019-10-22 16:15:10
ubuntucve
ubuntucve
CVE-2019-12290
2019-10-22 00:00:00
veracode
veracode
Improper Input Validation
2024-01-16 06:33:53
cve
cve
CVE-2019-12290
2019-10-22 16:15:00
freebsd
freebsd
libidn2 -- roundtrip check vulnerability
2019-11-14 00:00:00
ubuntu
ubuntu
Libidn2 vulnerabilities
2019-10-29 00:00:00
suse
suse
Security update for libidn2 (moderate)
2019-12-03 00:00:00
Security update for libidn2 (moderate)
2019-12-03 00:00:00
amazon
amazon
Medium: libidn2
2019-12-13 21:13:00
Medium: libidn2
2019-12-13 19:34:00
gentoo
gentoo
GNU IDN Library 2: Multiple vulnerabilities
2020-03-30 00:00:00
mageia
mageia
Updated libidn2 packages fix security vulnerabilities
2019-12-31 19:51:17
cloudfoundry
cloudfoundry
USN-4168-1: Libidn2 vulnerabilities | Cloud Foundry
2019-11-18 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

8.3 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

71.1%

JSON
Related for PRION:CVE-2019-12290
nessus15fedora5openvas13alpinelinux1debiancve1osv1ubuntucve1veracode1cve1freebsd1ubuntu1suse2amazon2gentoo1mageia1cloudfoundry1ics1