Vulnerabilidades do Gnu Libidn2
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Gnu Libidn2: 2 registro(s), com versões afetadas e correções.cpe:2.3:a:gnu:libidn2
CVE-2019-12290
Alta · 7.5
CWE-20 22/10/2019
GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2...
GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it possible in some circumstances for one domain to impersonate another. By creating a malicious domain that matches a target domain except for the inclusion of certain punycoded Unicode characters (that would be discarded when converted first to a Unicode label and then back to an ASCII label), arbitrary domains can be impersonated.
CVE-2019-18224
Crítica · 9.8
CWE-787 21/10/2019
idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via...
idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.