CVE-2019-18224
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.7%
idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.
Produtos afetados
n/a · n/aReferências
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00008.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-12/msg00009.htmlhttps://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12420https://cert-portal.siemens.com/productcert/html/ssa-398330.htmlhttps://github.com/libidn/libidn2/commit/e4d1558aa2c1c04a05066ee8600f37603890ba8chttps://github.com/libidn/libidn2/compare/libidn2-2.1.0...libidn2-2.1.1https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDQVQ2XPV5BTZUFINT7AFJSKNNBVURNJ/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MINU5RKDFE6TKAFY5DRFN3WSFDS4DYVS/https://seclists.org/bugtraq/2020/Feb/4https://security.gentoo.org/glsa/202003-63https://usn.ubuntu.com/4168-1/https://www.debian.org/security/2020/dsa-4613