CVE-2016-6262

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-6262
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-6262.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2016-6262
Downstream
ALPINE (1)
MGASA (1)
openSUSE (1)
SUSE (4)
UBUNTU (1)
Related
openSUSE (1)
SUSE (4)
Published
2016-09-07T20:59:05Z
Modified
2026-10-22T10:47:16Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read, a different vulnerability than CVE-2015-8948.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "12.04"
                        },
                        {
                            "last_affected": "12.04"
                        },
                        {
                            "introduced": "14.04"
                        },
                        {
                            "last_affected": "14.04"
                        },
                        {
                            "introduced": "16.04"
                        },
                        {
                            "last_affected": "16.04"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "canonical:ubuntu_linux"
        },
        {
            "cpes": [
                "cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "42.1"
                        },
                        {
                            "last_affected": "42.1"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "opensuse:leap"
        },
        {
            "cpes": [
                "cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "13.2"
                        },
                        {
                            "last_affected": "13.2"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "opensuse:opensuse"
        }
    ]
}
References

Affected packages

Git / http.git.savannah.gnu.org/git/libidn.git/

Affected ranges

Type
GIT
Repo
http://http.git.savannah.gnu.org/git/libidn.git/
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
eabba1bb23237730787deaa2260d24367b04f685
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:gnu:libidn:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "last_affected": "1.32"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Affected versions

Other
gsasl-0-0-8
libgsasl-0-0-3
libgsasl-0-0-4
libgsasl-0-0-5
libgsasl-0-0-6
libgsasl-0-0-7
libidn-0-1-0
libidn-0-1-1
libidn-0-1-10
libidn-0-1-11
libidn-0-1-12
libidn-0-1-14
libidn-0-1-15
libidn-0-1-2
libidn-0-1-3
libidn-0-1-4
libidn-0-1-5
libidn-0-1-6
libidn-0-1-7
libidn-0-1-8
libidn-0-1-9
libidn-0-2-0
libidn-0-2-1
libidn-0-2-2
libidn-0-2-3
libidn-0-3-0
libidn-0-3-1
libidn-0-3-2
libidn-0-3-3
libidn-0-3-4
libidn-0-3-5
libidn-0-3-6
libidn-0-3-7
libidn-0-4-0
libidn-0-4-1
libidn-0-4-2
libidn-0-4-3
libidn-0-4-4
libidn-0-4-5
libidn-0-4-6
libidn-0-4-7
libidn-0-4-8
libidn-0-4-9
libidn-0-5-0
libidn-0-5-1
libidn-0-5-10
libidn-0-5-11
libidn-0-5-12
libidn-0-5-13
libidn-0-5-14
libidn-0-5-15
libidn-0-5-16
libidn-0-5-17
libidn-0-5-18
libidn-0-5-19
libidn-0-5-2
libidn-0-5-20
libidn-0-5-3
libidn-0-5-4
libidn-0-5-5
libidn-0-5-6
libidn-0-5-7
libidn-0-5-8
libidn-0-5-9
libidn-0-6-0
libidn-0-6-1
libidn-0-6-10
libidn-0-6-11
libidn-0-6-12
libidn-0-6-13
libidn-0-6-14
libidn-0-6-2
libidn-0-6-3
libidn-0-6-4
libidn-0-6-5
libidn-0-6-6
libidn-0-6-7
libidn-0-6-8
libidn-0-6-9
libidn-1-0
libidn-1-1
libidn-1-10
libidn-1-11
libidn-1-12
libidn-1-13
libidn-1-14
libidn-1-15
libidn-1-16
libidn-1-17
libidn-1-18
libidn-1-19
libidn-1-2
libidn-1-20
libidn-1-21
libidn-1-22
libidn-1-23
libidn-1-24
libidn-1-25
libidn-1-26
libidn-1-27
libidn-1-28
libidn-1-29
libidn-1-3
libidn-1-30
libidn-1-31
libidn-1-32
libidn-1-4
libidn-1-5
libidn-1-6
libidn-1-7
libidn-1-8
libidn-1-9
libstringprep-0-0-0
libstringprep-0-0-1
libstringprep-0-0-2
libstringprep-0-0-3
libstringprep-0-0-4
libstringprep-0-0-5
libstringprep-0-0-7
shishi-0-0-0-snapshot-20030211
shishi-0-0-1
shishi-0-0-2
shishi-0-0-3
shishi-0-0-4
shishi-0-0-5
shishi-0-0-6
shishi-0-0-7

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-6262.json"

Git / cgit.git.savannah.gnu.org/cgit/libidn.git

Affected ranges

Type
GIT
Repo
https://cgit.git.savannah.gnu.org/cgit/libidn.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
5e3cb9c7b5bf0ce665b9d68f5ddf095af5c9ba60
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "fixed": "5e3cb9c7b5bf0ce665b9d68f5ddf095af5c9ba60"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-6262.json"