Libidn2 (Gnu) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 24 known versions, newest CVE from 2019-10-22. Vendor: Gnu.

CVEs of Libidn2

• CVE-2019-12290 - CVSS 7.5 (high), 2019-10-22: GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it possible…
• CVE-2019-18224 - CVSS 9.8 (critical), 2019-10-21: idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.
• CVE-2017-14062 - CVSS 9.8 (critical), 2017-08-31: Integer overflow in the decode_digit function in puny_decode.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have…
• CVE-2017-14061 - CVSS 9.8 (critical), 2017-08-31: Integer overflow in the _isBidi function in bidi.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified…