Ubuntu 16.04 ESM : Libidn2 vulnerability (USN-3421-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-3421-2 advisory. USN-3421-1 fixed a vulnerability in Libidn2. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has extracted the...

Huawei EulerOS: Security Advisory for libidn2 (EulerOS-SA-2023-1735)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.0 : libidn2 (EulerOS-SA-2023-1735)

According to the versions of the libidn2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to...

K76594024: libidn vulnerability CVE-2017-14062

Security Advisory Description Integer overflow in the decodedigit function in punydecode.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact. CVE-2017-14062 Impact This vulnerability may allow attackers to cause a denial of...

SUSE CVE-2017-14061

Integer overflow in the isBidi function in bidi.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact...

SUSE CVE-2017-14062

Integer overflow in the decodedigit function in punydecode.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact...

SUSE CVE-2019-12290

GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it possible in some circumstances for one domain to impersonate another. By creating a malicious domain that matches a target domain except for the...

SUSE CVE-2019-18224

idn2toascii4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string...

Ubuntu: Security Advisory (USN-3421-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2022-4301 Malicious code in libidn2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e77d2762f4e003edd579854cab88eb2720346193bcf082994e684ff256d7cf3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in libidn2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e77d2762f4e003edd579854cab88eb2720346193bcf082994e684ff256d7cf3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

new packages: libidn2

An update is available for libidn2. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

Mageia: Security Advisory (MGASA-2019-0416)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:3086-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3421-2: Libidn2 vulnerability

USN-3421-1 fixed a vulnerability in Libidn2. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM...

USN-3421-2 libidn2-0 vulnerability

USN-3421-1 fixed a vulnerability in Libidn2. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM...

Buffer Overflow

libidn2 is vulnerable to buffer overflow. An attacker is able to exploit the vulnerability via a long domain string...

Huawei EulerOS: Security Advisory for libidn2 (EulerOS-SA-2020-1976)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.2.0 : libidn2 (EulerOS-SA-2020-1976)

According to the version of the libidn2 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - idn2toascii4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain...

The vulnerability of the idn2_to_ascii_4i() function in the GNU library for IDN (libidn2), related to buffer overflows, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the idn2toascii4i function in the GNU library for IDN-related domains, libidn2, is related to a buffer overflow vulnerability. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...