Huawei EulerOS: Security Advisory for libidn (EulerOS-SA-2019-2608)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : libidn (EulerOS-SA-2019-2608)

According to the versions of the libidn package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers...

EulerOS 2.0 SP2 : libidn (EulerOS-SA-2019-2392)

According to the versions of the libidn package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an...

EulerOS Virtualization for ARM 64 3.0.3.0 : libidn (EulerOS-SA-2019-2337)

According to the version of the libidn package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - Integer overflow in the decodedigit function in punydecode.c in Libidn2 before 2.0.4 allows remote attackers to cause a...

Fedora 31 : mingw-libidn2 (2019-1ebb5c928e)

Libidn 2.3.0 released 2019-11-14 ================================== - Mitre has assigned CVE-2019-12290 which was fixed by the roundtrip feature introduced in 2.2.0 commit 241e8f48 - Update the data tables from Unicode 6.3.0 to Unicode 11.0 - Turn idn2punycodeencode, idn2punycodedecode into compa...

EulerOS 2.0 SP5 : libidn (EulerOS-SA-2019-2206)

According to the versions of the libidn package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The stringpreputf8nfkcnormalize function in lib/nfkc.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service...

DEBIAN-CVE-2019-12290

GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it possible in some circumstances for one domain to impersonate another. By creating a malicious domain that matches a target domain except for the...

EulerOS 2.0 SP3 : libidn (EulerOS-SA-2019-2049)

According to the versions of the libidn package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The idnatoascii4i function in lib/idna.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service out-of-bounds read...

EulerOS 2.0 SP2 : libidn (EulerOS-SA-2019-1851)

According to the version of the libidn package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The idnatoascii4i function in lib/idna.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service out-of-bounds read an...

Information Disclosure

libidn is vulnerable to information disclosure. An out-of-bounds read flaw in the stringpreputf8toucs4 function allows context-dependent attackers to read system memory and possibly have other unspecified impact via invalid UTF-8 characters in a string...

EulerOS Virtualization 3.0.1.0 : libidn (EulerOS-SA-2019-1454)

According to the version of the libidn package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The stringpreputf8toucs4 function in libin before 1.31, as used in jabberd2, allows context-dependent attackers to read system memory...

EulerOS Virtualization 2.5.3 : libidn (EulerOS-SA-2019-1268)

According to the version of the libidn package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The stringpreputf8nfkcnormalize function in lib/nfkc.c in libidn before 1.33 allows context-dependent attackers to cause a denial of...

Denial Of Service (DoS)

glibc is vulnerable to denial of service. An invalid free flaw was found in glibc's getaddrinfo function when used with the AIIDN flag. A remote attacker able to make an application call this function could use this flaw to execute arbitrary code with the permissions of the user running the...

Fedora 28 : libidn (2018-f749c70191)

Update to the latest upstream release, which fixes CVE-2017-14062. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Debian DLA-1447-1 : libidn security update

An integer overflow vulnerability was discovered in libidn, the GNU library for Internationalized Domain Names IDNs, in its Punycode handling a Unicode characters to ASCII encoding allowing a remote attacker to cause a denial of service against applications using the library. For Debian 8 'Jessie...

Debian: Security Advisory (DLA-1447-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 1447-1] libidn security update

Package : libidn Version : 1.29-1+deb8u3 CVE ID : CVE-2017-14062 Debian Bug : 873903 An integer overflow vulnerability was discovered in libidn, the GNU library for Internationalized Domain Names IDNs, in its Punycode handling a Unicode characters to ASCII encoding allowing a remote attacker to...

DLA-1447-1 libidn - security update

Bulletin has no description...

openSUSE Security Update : libidn (openSUSE-2018-341)

This update for libidn fixes the following issue : - CVE-2017-14062: Prevent integer overflow in the decodedigit function that allowed remote attackers to cause a denial of service or possibly have unspecified other impact bsc1056450. This update was imported from the SUSE:SLE-12:Update update...

Fedora 27 : libidn (2018-02e23192f5)

Update to the latest upstream release, which fixes CVE-2017-14062. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...