Univention Bugzilla – Bug 41949
libidn: Multiple issues (3.3)
Last modified: 2016-11-28 14:49:53 CET
+++ This bug was initially created as a clone of Bug #39440 +++ Upstream Debian package version 1.25-2+deb7u1 fixes this issue: * The stringprep_utf8_to_ucs4 function in libidn before 1.31, as used in jabberd2 and other applications, allows context-dependent attackers to read system memory and possibly have other unspecified impact via invalid UTF-8 characters in a string, which triggers an out-of-bounds read (CVE-2015-2059) GNU Libidn is a fully documented implementation of the Stringprep, Punycode and IDNA specifications. Libidn's purpose is to encode and decode internationalized domain names. Possibly affects gnutls, wget, and curl
Upstream Debian package version 1.25-2+deb7u2 fixes the following issues: * Solve out-of-bounds-read when reading one zero byte as input (CVE-2015-8948) * out-of-bounds stack read in idna_to_ascii_4i (CVE-2016-6261) * stringprep_utf8_nfkc_normalize reject invalid UTF-8 (CVE-2016-6263) CVE-2015-8948: CVSS v2 base score: 2.6 (AV:N/AC:H/Au:N/C:P/I:N/A:N) CVE-2016-6261: CVSS v2 base score: 2.6 (AV:N/AC:H/Au:N/C:P/I:N/A:N) CVE-2016-6263: CVSS v2 base score: 2.6 (AV:N/AC:H/Au:N/C:N/I:N/A:P)
*** This bug has been marked as a duplicate of bug 42568 ***