libidn2/libidn2_to_ascii_8z_fuzzer: Use-of-uninitialized-value in _idn2_punycode_decode

Project: https://gitlab.com/libidn/libidn2.git Detailed report: https://oss-fuzz.com/testcase?key=5665832347107328 Project: libidn2 Fuzzer: libFuzzerlibidn2toascii8zfuzzer Fuzz target binary: libidn2toascii8zfuzzer Job Type: libfuzzermsanlibidn2 Platform Id: linux Crash Type:...

libidn2/libidn2_to_ascii_8z_fuzzer: Heap-buffer-overflow in idn2_to_ascii_4i

Project: https://gitlab.com/libidn/libidn2.git Detailed report: https://oss-fuzz.com/testcase?key=5644466457673728 Project: libidn2 Fuzzer: libFuzzerlibidn2toascii8zfuzzer Fuzz target binary: libidn2toascii8zfuzzer Job Type: libfuzzerasanlibidn2 Platform Id: linux Crash Type: Heap-buffer-overflow...

Fedora 28 : glibc (2018-916dfe0d86)

This update ensures that valgrind works again without installing glibc debuginfo packages RHBZ1570246. It also addresses a security vulnerability in the mempcpy implementation for the Intel Xeon Phi processors CVE-2018-11237, RHBZ1581275. Furthermore, the switch to libidn2 uses the final upstream...

Ubuntu: Security Advisory (USN-3421-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-8625

curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host...

Debian: Security Advisory (DLA-1085-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security fix for the ALT Linux 9 package glibc version 6:2.26.9000.0.1248.407552c-alt1

Jan. 30, 2018 Dmitry V. Levin 6:2.26.9000.0.1248.407552c-alt1 - Updated to glibc-2.26.9000-1248-g407552c closes: 26977. - Switched IDNA implementation to libidn2 by Florian Weimer; fixes: CVE-2016-6261, CVE-2016-6263, CVE-2017-14062...

Fedora 27 : mingw-libidn2 (2017-b469be1a72)

Libidn2 2.0.4 released 2017-08-30 =================================== - Fix integer overflow in bidi.c/isBidi - Fix integer overflow in punydecode.c/decodedigit - Improve docs - Fix idnafree to idnfree - Update fuzzer corpora Note that Tenable Network Security has extracted the preceding...

Fedora 27 : libidn2 (2017-09b1c3f099)

Libidn2 2.0.4 released 2017-08-30 =================================== - Fix integer overflow in bidi.c/isBidi - Fix integer overflow in punydecode.c/decodedigit - Improve docs - Fix idnafree to idnfree - Update fuzzer corpora Note that Tenable Network Security has extracted the preceding...

The vulnerability of the _isBidi function in the (bidi.c) library of Libidn2, which allows a hacker to cause a service failure or exert other effects.

The vulnerability of the isBidi function in the bidi.c library from Libidn2 is due to a numerical overflow condition. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures or other adverse effects...

MGASA-2017-0365 Updated libidn packages fix security vulnerability

Integer overflow in the decodedigit function in punydecode.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact. CVE-2017-14062...

Updated libidn packages fix security vulnerability

Integer overflow in the decodedigit function in punydecode.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact. CVE-2017-14062...

Debian DSA-3988-1 : libidn2-0 - security update

An integer overflow vulnerability was discovered in decodedigit in libidn2-0, the GNU library for Internationalized Domain Names IDNs, allowing a remote attacker to cause a denial of service against an application using the library application crash. %NASLMINLEVEL 70300 C Tenable Network Security...

[SECURITY] [DSA 3988-1] libidn2-0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3988-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 30, 2017 https://www.debian.org/security/faq -...

[SECURITY] Fedora 27 Update: mingw-libidn2-2.0.4-1.fc27

Libidn2 is an implementation of the IDNA2008 specifications in RFC 5890, 5891, 5892 and 5893 for internationalized domain names IDN. It is a standalone library, without any dependency on libidn...

DSA-3988-1 libidn2-0 - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3988-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 17.04 : libidn2-0 vulnerability (USN-3421-1)

It was discovered that Libidn2 incorrectly handled certain input. A remote attacker could possibly use this issue to cause Libidn2 to crash, resulting in a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisor...

USN-3421-1: Libidn2 vulnerability

It was discovered that Libidn2 incorrectly handled certain input. A remote attacker could possibly use this issue to cause Libidn2 to crash, resulting in a denial of service...

openSUSE Security Update : libidn2 (openSUSE-2017-1036)

This update for libidn2 fixes the following issues : - integer overflow in bidi.c/isBidi could lead to unexpected behavior boo1056451 - integer overflow in punydecode.c/decodedigit could lead to unexpected behavior boo1056450 libunistring was rebuilt to supply a -32bit package, a dependency for...