gentoo

GNU IDN Library 2: Multiple vulnerabilities

Background GNU IDN Library 2 is an implementation of the IDNA2008 + TR46 specifications (RFC 5890, RFC 5891, RFC 5892, RFC 5893, TR 46). Description Multiple vulnerabilities have been discovered in GNU IDN Library 2. Please review the CVE identifiers referenced below for details. Impact A remote...

7.5 CVSS

2020-03-30T00:00:00

debian

[SECURITY] [DSA 4613-1] libidn2 security update

Debian Security Advisory DSA-4613-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso February 01, 2020 https://www.debian.org/security/faq Package : libidn2 CVE ID : CVE-2019-18224 Debian Bug :...

7.5 CVSS

2020-02-01T06:00:29

debian

[SECURITY] [DSA 4613-1] libidn2 security update

Debian Security Advisory DSA-4613-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso February 01, 2020 https://www.debian.org/security/faq Package : libidn2 CVE ID : CVE-2019-18224 Debian Bug :...

7.5 CVSS

2020-02-01T06:00:29

mageia

Updated libidn2 packages fix security vulnerabilities

Updated libidn2 packages fix security vulnerabilities: It was discovered that Libidn2 incorrectly handled certain inputs. A attacker could possibly use this issue to impersonate domains (CVE-2019-12290). It was discovered that Libidn2 incorrectly handled certain inputs. An attacker could possibly...

7.5 CVSS

2019-12-31T16:51:17

amazon

Medium: libidn2

Issue Overview: idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string. (CVE-2019-18224) GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes...

7.5 CVSS

2019-12-13T21:13:00

amazon

Medium: libidn2

Issue Overview: heap-based buffer overflow in idn2_to_ascii_4i in lib/lookup.c idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.(CVE-2019-18224) Affected Packages: libidn2 Issue Correction: Run yum update libidn2 to update...

7.5 CVSS

2019-12-13T19:34:00

fedora

[SECURITY] Fedora 30 Update: libidn2-2.3.0-1.fc30

Libidn2 is an implementation of the IDNA2008 specifications in RFC 5890, 5891, 5892, 5893 and TR46 for internationalized domain names (IDN). It is a standalone library, without any dependency on...

5.0 CVSS

2019-12-09T02:28:54

fedora

[SECURITY] Fedora 29 Update: mingw-libidn2-2.3.0-1.fc29

Libidn2 is an implementation of the IDNA2008 specifications in RFC 5890, 5891, 5892 and 5893 for internationalized domain names (IDN). It is a standalone library, without any dependency on...

5.0 CVSS

2019-11-25T02:33:41

fedora

[SECURITY] Fedora 31 Update: mingw-libidn2-2.3.0-1.fc31

Libidn2 is an implementation of the IDNA2008 specifications in RFC 5890, 5891, 5892 and 5893 for internationalized domain names (IDN). It is a standalone library, without any dependency on...

5.0 CVSS

2019-11-25T01:51:04

fedora

[SECURITY] Fedora 30 Update: mingw-libidn2-2.3.0-1.fc30

Libidn2 is an implementation of the IDNA2008 specifications in RFC 5890, 5891, 5892 and 5893 for internationalized domain names (IDN). It is a standalone library, without any dependency on...

5.0 CVSS

2019-11-25T01:05:16

fedora

[SECURITY] Fedora 31 Update: libidn2-2.3.0-1.fc31

Libidn2 is an implementation of the IDNA2008 specifications in RFC 5890, 5891, 5892, 5893 and TR46 for internationalized domain names (IDN). It is a standalone library, without any dependency on...

5.0 CVSS

2019-11-20T01:02:33

freebsd

libidn2 -- roundtrip check vulnerability

CVE list: GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it possible in some circumstances for one domain to impersonate another. By creating a malicious domain that matches...

5.0 CVSS

2019-11-14T00:00:00

almalinux

libidn2 bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References...

2019-11-05T18:07:54

fedora

[SECURITY] Fedora 30 Update: mingw-libidn2-2.2.0-1.fc30

Libidn2 is an implementation of the IDNA2008 specifications in RFC 5890, 5891, 5892 and 5893 for internationalized domain names (IDN). It is a standalone library, without any dependency on...

7.5 CVSS

2019-11-03T00:13:35

fedora

[SECURITY] Fedora 29 Update: mingw-libidn2-2.2.0-1.fc29

Libidn2 is an implementation of the IDNA2008 specifications in RFC 5890, 5891, 5892 and 5893 for internationalized domain names (IDN). It is a standalone library, without any dependency on...

7.5 CVSS

2019-11-02T01:45:10

ubuntu

Libidn2 vulnerabilities

It was discovered that Libidn2 incorrectly handled certain inputs. A attacker could possibly use this issue to impersonate domains. (CVE-2019-12290) It was discovered that Libidn2 incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code....

7.5 CVSS

2019-10-29T00:00:00

debiancve

CVE-2019-12290

GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it possible in some circumstances for one domain to impersonate another. By creating a malicious domain that matches a target domain except for the...

5.0 CVSS

2019-10-22T16:15:00

ubuntucve

CVE-2019-12290

GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it possible in some circumstances for one domain to impersonate another. By creating a malicious domain that matches a target domain except for the...

5.0 CVSS

2019-10-22T00:00:00

debiancve

CVE-2019-18224

idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain...

7.5 CVSS

2019-10-21T17:15:00

ubuntucve

CVE-2019-18224

idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain...

7.5 CVSS

2019-10-21T00:00:00

affectedPackage.packageName:"libidn2"

GNU IDN Library 2: Multiple vulnerabilities

[SECURITY] [DSA 4613-1] libidn2 security update

[SECURITY] [DSA 4613-1] libidn2 security update

Updated libidn2 packages fix security vulnerabilities

Medium: libidn2

Medium: libidn2

[SECURITY] Fedora 30 Update: libidn2-2.3.0-1.fc30

[SECURITY] Fedora 29 Update: mingw-libidn2-2.3.0-1.fc29

[SECURITY] Fedora 31 Update: mingw-libidn2-2.3.0-1.fc31

[SECURITY] Fedora 30 Update: mingw-libidn2-2.3.0-1.fc30

[SECURITY] Fedora 31 Update: libidn2-2.3.0-1.fc31

libidn2 -- roundtrip check vulnerability

libidn2 bug fix and enhancement update

[SECURITY] Fedora 30 Update: mingw-libidn2-2.2.0-1.fc30

[SECURITY] Fedora 29 Update: mingw-libidn2-2.2.0-1.fc29

Libidn2 vulnerabilities

CVE-2019-12290

CVE-2019-12290

CVE-2019-18224

CVE-2019-18224