CVE-2017-14061 - libidn2: integer overflow in bidi.c/_isBidi()

Back Back to CVE browser

CRITICAL

libidn2: integer overflow in bidi.c/_isBidi()

Published Aug 31, 2017

9.8

CRITICAL

CVSS 3.0

EPSS 2.40%

Description

Integer overflow in the _isBidi function in bidi.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.

Affected products

Red Hat Enterprise Linux 5

libidn

Not affected
Red Hat Enterprise Linux 6

libidn

Not affected
Red Hat Enterprise Linux 7

libidn

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	libidn	Not affected	n/a
Red Hat Enterprise Linux 6	libidn	Not affected	n/a
Red Hat Enterprise Linux 7	libidn	Not affected	n/a

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-190

Integer Overflow

References (6)

https://access.redhat.com/security/cve/CVE-2017-14061
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1486881
Issue Tracking
https://gitlab.com/libidn/libidn2/blob/master/NEWS
x_refsource_CONFIRMRelease NotesThird Party Advisory
https://gitlab.com/libidn/libidn2/commit/16853b6973a1e72fee2b7cccda85472cb9951305
x_refsource_CONFIRMPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-14061
https://www.cve.org/CVERecord?id=CVE-2017-14061

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2017-14061		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1486881		Issue Tracking
https://gitlab.com/libidn/libidn2/blob/master/NEWS		x_refsource_CONFIRMRelease NotesThird Party Advisory
https://gitlab.com/libidn/libidn2/commit/16853b6973a1e72fee2b7cccda85472cb9951305		x_refsource_CONFIRMPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-14061
https://www.cve.org/CVERecord?id=CVE-2017-14061