Univention Bugzilla – Bug 39440
libidn: Multiple issues (4.1)
Last modified: 2017-10-26 13:53:56 CEST
* The stringprep_utf8_to_ucs4 function in libidn before 1.31, as used in jabberd2 and other applications, allows context-dependent attackers to read system memory and possibly have other unspecified impact via invalid UTF-8 characters in a string, which triggers an out-of-bounds read (CVE-2015-2059) GNU Libidn is a fully documented implementation of the Stringprep, Punycode and IDNA specifications. Libidn's purpose is to encode and decode internationalized domain names. Possibly affects gnutls, wget, and curl
Upstream Debian package version 1.25-2+deb7u1 fixes this issue.
Upstream Debian package version 1.25-2+deb7u2 fixes the following issues: * Solve out-of-bounds-read when reading one zero byte as input (CVE-2015-8948) * out-of-bounds stack read in idna_to_ascii_4i (CVE-2016-6261) * stringprep_utf8_nfkc_normalize reject invalid UTF-8 (CVE-2016-6263) CVE-2015-8948: CVSS v2 base score: 2.6 (AV:N/AC:H/Au:N/C:P/I:N/A:N) CVE-2016-6261: CVSS v2 base score: 2.6 (AV:N/AC:H/Au:N/C:P/I:N/A:N) CVE-2016-6263: CVSS v2 base score: 2.6 (AV:N/AC:H/Au:N/C:N/I:N/A:P)
Tests (i386): OK Advisory: libidn.yaml
Verified: * 1.25-2+deb7u2 imported and built * No UCS patches * Package update Ok (amd64) * Advisory Ok
<http://errata.software-univention.de/ucs/4.1/240.html>