10 matches found
Linux Distros Unpatched Vulnerability : CVE-2019-18224
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - idn2toascii4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string. CVE-2019-18224 Note that Nessus relies on t...
OSV-2020-417 Heap-buffer-overflow in idn2_to_ascii_4i
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12420 Crash type: Heap-buffer-overflow WRITE Crash state: idn2toascii4i libidn2toascii8zfuzzer.c...
The vulnerability of the idn2_to_ascii_4i() function in the GNU library for IDN (libidn2), related to buffer overflows, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the idn2toascii4i function in the GNU library for IDN-related domains, libidn2, is related to a buffer overflow vulnerability. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
libidn2: heap-based buffer overflow in idn2_to_ascii_4i in lib/lookup.c
idn2toascii4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string...
GNU libidn2 Buffer Error Vulnerability
GNU libidn2 is a library that supports encoding and decoding of internationalized domain names. A buffer error vulnerability exists in the 'idn2toascii4i' function of the lib/lookup.c file in GNU libidn2 versions prior to 2.1.1, which can be exploited by attackers to cause, among other things, a...
ALPINE-CVE-2019-18224
idn2toascii4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string...
CVE-2019-18224
idn2toascii4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string...
CVE-2019-18224
CVE-2019-18224 affects libidn2: heap-based overflow in idn2_to_ascii_4i (lib/lookup.c) in GNU libidn2 before 2.1.1. This can trigger denial of service or arbitrary code execution when handling long domain strings. Public advisories confirm the flaw and provide fixes; Debian lists a fix at 2.0.5-1...
