CVE-2016-6263

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-6263
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-6263.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2016-6263
Downstream
ALPINE (1)
DEBIAN (1)
MGASA (1)
openSUSE (1)
SUSE (4)
UBUNTU (1)
Related
openSUSE (1)
SUSE (4)
Published
2016-09-07T20:59:06Z
Modified
2026-10-22T02:45:30Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

The stringprep_utf8_nfkc_normalize function in lib/nfkc.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted UTF-8 data.

References

Affected packages

Git / http.git.savannah.gnu.org/git/libidn.git/

Affected ranges

Type
GIT
Repo
http://http.git.savannah.gnu.org/git/libidn.git/
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
eabba1bb23237730787deaa2260d24367b04f685
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:gnu:libidn:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "last_affected": "1.32"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Affected versions

Other
gsasl-0-0-8
libgsasl-0-0-3
libgsasl-0-0-4
libgsasl-0-0-5
libgsasl-0-0-6
libgsasl-0-0-7
libidn-0-1-0
libidn-0-1-1
libidn-0-1-10
libidn-0-1-11
libidn-0-1-12
libidn-0-1-14
libidn-0-1-15
libidn-0-1-2
libidn-0-1-3
libidn-0-1-4
libidn-0-1-5
libidn-0-1-6
libidn-0-1-7
libidn-0-1-8
libidn-0-1-9
libidn-0-2-0
libidn-0-2-1
libidn-0-2-2
libidn-0-2-3
libidn-0-3-0
libidn-0-3-1
libidn-0-3-2
libidn-0-3-3
libidn-0-3-4
libidn-0-3-5
libidn-0-3-6
libidn-0-3-7
libidn-0-4-0
libidn-0-4-1
libidn-0-4-2
libidn-0-4-3
libidn-0-4-4
libidn-0-4-5
libidn-0-4-6
libidn-0-4-7
libidn-0-4-8
libidn-0-4-9
libidn-0-5-0
libidn-0-5-1
libidn-0-5-10
libidn-0-5-11
libidn-0-5-12
libidn-0-5-13
libidn-0-5-14
libidn-0-5-15
libidn-0-5-16
libidn-0-5-17
libidn-0-5-18
libidn-0-5-19
libidn-0-5-2
libidn-0-5-20
libidn-0-5-3
libidn-0-5-4
libidn-0-5-5
libidn-0-5-6
libidn-0-5-7
libidn-0-5-8
libidn-0-5-9
libidn-0-6-0
libidn-0-6-1
libidn-0-6-10
libidn-0-6-11
libidn-0-6-12
libidn-0-6-13
libidn-0-6-14
libidn-0-6-2
libidn-0-6-3
libidn-0-6-4
libidn-0-6-5
libidn-0-6-6
libidn-0-6-7
libidn-0-6-8
libidn-0-6-9
libidn-1-0
libidn-1-1
libidn-1-10
libidn-1-11
libidn-1-12
libidn-1-13
libidn-1-14
libidn-1-15
libidn-1-16
libidn-1-17
libidn-1-18
libidn-1-19
libidn-1-2
libidn-1-20
libidn-1-21
libidn-1-22
libidn-1-23
libidn-1-24
libidn-1-25
libidn-1-26
libidn-1-27
libidn-1-28
libidn-1-29
libidn-1-3
libidn-1-30
libidn-1-31
libidn-1-32
libidn-1-4
libidn-1-5
libidn-1-6
libidn-1-7
libidn-1-8
libidn-1-9
libstringprep-0-0-0
libstringprep-0-0-1
libstringprep-0-0-2
libstringprep-0-0-3
libstringprep-0-0-4
libstringprep-0-0-5
libstringprep-0-0-7
shishi-0-0-0-snapshot-20030211
shishi-0-0-1
shishi-0-0-2
shishi-0-0-3
shishi-0-0-4
shishi-0-0-5
shishi-0-0-6
shishi-0-0-7

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-6263.json"

Git / cgit.git.savannah.gnu.org/cgit/libidn.git

Affected ranges

Type
GIT
Repo
https://cgit.git.savannah.gnu.org/cgit/libidn.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
1fbee57ef3c72db2206dd87e4162108b2f425555
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "fixed": "1fbee57ef3c72db2206dd87e4162108b2f425555"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-6263.json"