CLEANSTART-2024-VX77330 idn2_to_ascii_4i in lib/lookup

Security vulnerability affects the libidn2 package. idn2toascii4i in lib/lookup...

CLEANSTART-2024-IG59808 GNU libidn2 before 2

Security vulnerability affects the libidn2 package. GNU libidn2 before 2...

Rocky Linux 8 [CIQ] Security Update: idn2 / idn2-debuginfo / libidn2 / libidn2-debuginfo / etc (crlba-2019_3621)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlba-20193621 advisory. For detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section. This advisory is provided by Ctrl IQ,...

Astra Linux – Vulnerability in libidn2

GNU libidn2 before version 2.2.0 fails to perform the round-trip checks specified in RFC3490, Section 4.2, when converting A-labels to U-labels. This allows, under certain circumstances, one domain to impersonate another. By creating a malicious domain that matches a target domain except for the...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libidn2: idn2-2.3.8-4.hum1 aarch64, x8664 libidn2-2.3.8-4.hum1 aarch64, x8664 libidn2-devel-2.3.8-4.hum1 aarch64, x8664 libidn2-2.3.8-4.hum1.src src...

EUVD-2026-38523

GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idnatounicodeinternal. The affected code is not present in libidn2...

CVE-2026-57053

GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idnatounicodeinternal. The affected code is not present in libidn2...

Siemens SIMATIC S7-1500 Out-of-bounds Write (CVE-2019-18224)

idn2toascii4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

Siemens SIMATIC S7-1500 Improper Input Validation (CVE-2019-12290)

GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it possible in some circumstances for one domain to impersonate another. By creating a malicious domain that matches a target domain except for the...

EUVD-2019-8024

Malware in sbrugna...

EUVD-2019-3931

Malware in sbrugna...

EUVD-2017-5576

Malware in sbrugna...

EUVD-2017-5575

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2019-18224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - idn2toascii4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string. CVE-2019-18224 Note that Nessus relies on t...

RHBA-2019:3621 Red Hat Bug Fix Advisory: libidn2 bug fix and enhancement update

Bulletin has no description...

OPENSUSE-SU-2024:10950-1 libidn2-0-2.3.2-1.2 on GA media

These are all security issues fixed in the libidn2-0-2.3.2-1.2 package on the GA media of openSUSE Tumbleweed...

RHEL 6 : libidn2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libidn2: Integer overflow in punydecode.c/decodedigit CVE-2017-14062 Note that Nessus has not tested for this issue...

RHEL 7 : libidn2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libidn2: Integer overflow in punydecode.c/decodedigit CVE-2017-14062 Note that Nessus has not tested for this issue...

RHEL 5 : libidn2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libidn2: Integer overflow in punydecode.c/decodedigit CVE-2017-14062 Note that Nessus has not tested for this issue...

Integer Overflow

libidn2.so is vulnerable to Integer Overflow. The vulnerability is due to the use of an unsigned integer llen in a loop condition, which could overflow due to the post-increment operation in the loop. This can potentially lead to Denial of Service...