Lucene search
+L

84 matches found

RedHat Linux
RedHat Linux
added 2025/09/17 3:41 p.m.5 views

idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded

A flaw was found in idna crate. This vulnerability allows hostname spoofing and potential privilege escalation via specially crafted Punycode labels that render as ASCII or empty labels, leading to incorrect equality comparisons during hostname validation...

8.8CVSS7.3AI score0.00201EPSS
SaveExploits1References6
OSV
OSV
added 2025/07/02 1:42 p.m.6 views

SUSE-RU-2025:02204-1 Recommended update for aws-nitro-enclaves-cli

This update for aws-nitro-enclaves-cli fixes the following issues: - Fix idna accepts Punycode labels that do not produce any non-ASCII when decoded bsc1243859 - Update to version 1.4.2 - Update aws-nitro-enclaves-sdk-bootstrap to version f718dea6 - Update to version 1.3.3git0.afb7264 - Update...

8.8CVSS6.9AI score0.00201EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2024/12/09 8:41 p.m.27 views

`idna` accepts Punycode labels that do not produce any non-ASCII when decoded

idna 0.5.0 and earlier accepts Punycode labels that do not produce any non-ASCII output, which means that either ASCII labels or the empty root label can be masked such that they appear unequal without IDNA processing or when processed with a different implementation and equal when processed with...

8.8CVSS4.2AI score0.00201EPSS
SaveExploits1References4Affected Software1
RustSec
RustSec
added 2024/12/09 12:0 p.m.7 views

`idna` accepts Punycode labels that do not produce any non-ASCII when decoded

idna 0.5.0 and earlier accepts Punycode labels that do not produce any non-ASCII output, which means that either ASCII labels or the empty root label can be masked such that they appear unequal without IDNA processing or when processed with a different implementation and equal when processed with...

8.8CVSS7.2AI score0.00201EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder