CVE-2017-14062

Integer overflow in the decodedigit function in punydecode.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.

References

Affected packages

Debian:11 / libidn

Package

Name: libidn
Purl: pkg:deb/debian/libidn?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.33-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / libidn

Package

Name: libidn
Purl: pkg:deb/debian/libidn?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.33-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / libidn

Package

Name: libidn
Purl: pkg:deb/debian/libidn?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.33-2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / gitlab.com/libidn/libidn2

Affected ranges

Type: GIT
Repo: https://gitlab.com/libidn/libidn2
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

3284eb342cd0ed1a18786e3fcdf0cdd7e76676bd

Fixed

3284eb342cd0ed1a18786e3fcdf0cdd7e76676bd

Affected versions

libidn2-0.*

libidn2-0.10

libidn2-0.11

libidn2-0.12

libidn2-0.13

libidn2-0.14

libidn2-0.15

libidn2-0.16

libidn2-0.3

libidn2-0.4

libidn2-0.5

libidn2-0.6

libidn2-0.7

libidn2-0.8

libidn2-0.9

libidn2-2.*

libidn2-2.0.0

libidn2-2.0.1

libidn2-2.0.2

libidn2-2.0.3