668
VMScore

CVE-2017-14062

Published: 31/08/2017 Updated: 07/12/2020
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Integer overflow in the decode_digit function in puny_decode.c in Libidn2 prior to 2.0.4 allows remote malicious users to cause a denial of service or possibly have unspecified other impact.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

gnu libidn2

debian debian linux 8.0

debian debian linux 9.0

debian debian linux 10.0

Vendor Advisories

Debian Bug report logs - #873902 libidn2-0: CVE-2017-14062: integer overflow in decode_digit Package: src:libidn2-0; Maintainer for src:libidn2-0 is Debian Libidn team <help-libidn@gnuorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 1 Sep 2017 04:57:02 UTC Severity: important Tags: patch, secu ...
Debian Bug report logs - #873904 libidn2-0: CVE-2017-14061: integer overflow in _isBidi function Package: src:libidn2-0; Maintainer for src:libidn2-0 is Debian Libidn team <help-libidn@gnuorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 1 Sep 2017 05:12:02 UTC Severity: important Tags: patch, ...
An integer overflow vulnerability was discovered in decode_digit() in libidn2-0, the GNU library for Internationalized Domain Names (IDNs), allowing a remote attacker to cause a denial of service against an application using the library (application crash) For the oldstable distribution (jessie), this problem has been fixed in version 010-2+deb8u ...
Libidn could be made to crash or run programs if it processed specially crafted input ...
Libidn could be made to crash or run programs if it processed specially crafted input ...
Libidn2 could be made to crash if it received specially crafted input ...
Integer overflow in the decode_digit function in puny_decodec in Libidn2 before 204 allows remote attackers to cause a denial of service or possibly have unspecified other impact ...