CVE-2017-14062

概要

参考情報

• debian.org/security/2017/dsa-3988 · Third Party Advisory
• gitlab.com/libidn/libidn2/blob/master/NEWS · Release Notes
• gitlab.com/libidn/libidn2/commit/3284eb342cd0ed1a18786e3fcdf0cdd7e76676bd · Patch
• lists.debian.org/debian-lts-announce/2018/07/msg00040.html · Mailing List

libidn2 のその他の脆弱性

• CVE-2019-12290高 7.5GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This m…
• CVE-2019-18224緊急 9.8idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.
• CVE-2017-14061緊急 9.8Integer overflow in the _isBidi function in bidi.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly …