LI
Product
libidn
6
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 0Low 1
Watch
Add libidn to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-6263 | 7.5 | Sep 7 | The stringprep_utf8_nfkc_normalize function in lib/nfkc.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via… Affected: through 1.32 |
| CVE-2016-6262 | 7.5 | Sep 7 | idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read, a different… Affected: through 1.32 |
| CVE-2016-6261 | 7.5 | Sep 7 | The idna_to_ascii_4i function in lib/idna.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via 64 bytes of… Affected: through 1.32 |
| CVE-2015-8948 | 7.5 | Sep 7 | idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read Affected: through 1.32 |
Showing 4