Lucene search
K

20 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2015-8804

Malware in sbrugna...

7.5CVSS7.6AI score0.02002EPSS
Exploits0References16
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.14 views

RHEL 7 : libidn (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libidn2: Integer overflow in punydecode.c/decodedigit CVE-2017-14062 - The stringpreputf8toucs4 function ...

9.8CVSS8.4AI score0.02955EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.25 views

Debian: Security Advisory (DLA-291-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.00827EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:10 a.m.1 views

SUSE CVE-2015-8948

idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read...

7.5CVSS6.7AI score0.02002EPSS
Exploits0References26
Fedora
Fedora
added 2016/10/10 6:19 p.m.29 views

[SECURITY] Fedora 25 Update: mingw-libidn-1.33-1.fc25

GNU Libidn is an implementation of the Stringprep, Punycode and IDNA specifications defined by the IETF Internationalized Domain Names IDN working group, used for internationalized domain names...

7.5CVSS2AI score0.02955EPSS
Exploits0
NVD
NVD
added 2016/09/07 8:59 p.m.20 views

CVE-2015-8948

idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read...

7.5CVSS7.2AI score0.02002EPSS
Exploits0References11
OSV
OSV
added 2016/09/07 8:59 p.m.1 views

ALPINE-CVE-2015-8948

idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read...

7.5CVSS6.7AI score0.02002EPSS
Exploits0References1
OSV
OSV
added 2016/09/07 8:59 p.m.1 views

DEBIAN-CVE-2015-8948

idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read...

7.5CVSS7.5AI score0.02002EPSS
Exploits0References1
OSV
OSV
added 2016/09/07 8:59 p.m.5 views

CVE-2015-8948

idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read...

7.5CVSS7.2AI score
Exploits0References14
Prion
Prion
added 2016/09/07 8:59 p.m.19 views

Out-of-bounds

idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read...

5CVSS6.4AI score0.02002EPSS
Exploits0References11Affected Software4
Debian CVE
Debian CVE
added 2016/09/07 8:0 p.m.30 views

CVE-2015-8948

idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read...

7.5CVSS7.5AI score0.02002EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2016/09/07 8:0 p.m.53 views

CVE-2015-8948

idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read...

7.5CVSS7.4AI score0.02002EPSS
Exploits0
Cvelist
Cvelist
added 2016/09/07 8:0 p.m.22 views

CVE-2015-8948

idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read...

7.2AI score0.02002EPSS
Exploits0References11
CVE
CVE
added 2016/09/07 8:0 p.m.142 views

CVE-2015-8948

CVE-2015-8948 : Affected software is GNU libidn; vulnerability arises from processing input where a zero byte is read as input, causing an out-of-bounds read that could reveal memory. This targets libidn versions before 1.33. Several connected advisories confirm the issue (e.g., BSA-2017-213 and ...

7.5CVSS7.1AI score0.02002EPSS
Exploits0References11Affected Software2
CNVD
CNVD
added 2016/07/29 12:0 a.m.1 views

GNU Libidn Remote Arbitrary Code Execution Vulnerability (CNVD-2016-05807)

GNU Libidn is a package that implements string preprocessing, Punycode, and IDNA specification definitions via the IETF International Domain Name IDN. A remote arbitrary code execution vulnerability exists in GNU Libidn, which could be exploited by an attacker to execute arbitrary code in an...

7.5CVSS9.1AI score0.02955EPSS
Exploits0References1
CNVD
CNVD
added 2016/07/29 12:0 a.m.1 views

GNU Libidn Remote Arbitrary Code Execution Vulnerability (CNVD-2016-05809)

GNU Libidn is a package that implements string preprocessing, Punycode, and IDNA specification definitions via the IETF International Domain Name IDN. A remote arbitrary code execution vulnerability exists in GNU Libidn, which could be exploited by an attacker to execute arbitrary code in an...

7.5CVSS9.1AI score0.02655EPSS
Exploits0References1
CNVD
CNVD
added 2016/07/29 12:0 a.m.1 views

GNU Libidn Remote Arbitrary Code Execution Vulnerability

GNU Libidn is a package that implements string preprocessing, Punycode, and IDNA specification definitions via the IETF International Domain Name IDN. A remote arbitrary code execution vulnerability exists in GNU Libidn. An attacker could exploit this vulnerability to execute arbitrary code in th...

7.5CVSS9.1AI score0.02002EPSS
Exploits0References1
Fedora
Fedora
added 2016/07/24 8:21 p.m.21 views

[SECURITY] Fedora 24 Update: libidn-1.33-1.fc24

GNU Libidn is an implementation of the Stringprep, Punycode and IDNA specifications defined by the IETF Internationalized Domain Names IDN working group, used for internationalized domain names...

7.5CVSS2AI score0.02955EPSS
Exploits0
Debian
Debian
added 2015/08/16 10:8 a.m.29 views

[SECURITY] [DLA 291-1] libidn security update

Package : libidn Version : 1.15-2+deb6u2 Adam Sampson found a vulnerability in GNU Libidn, library that implements the IETF IDN specifications. Libdin incorrectly handled invalid UTF-8 input, causing it to bad free. This issue was introduced by the fix for CVE-2015-2059. For Debian 6 “Squeeze”,...

7.5CVSS7AI score0.00827EPSS
Exploits0
OSV
OSV
added 2015/08/12 12:0 a.m.17 views

DLA-291-1 libidn - security update

Bulletin has no description...

7.7AI score
Exploits0
Rows per page
Query Builder