CVE-2017-14061

Integer overflow in the _isBidi function in bidi.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 67%
VendorProductVersion
gnulibidn2
𝑥
≤ 2.0.3
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libidn
bullseye
1.33-3
fixed
stretch
not-affected
jessie
not-affected
wheezy
not-affected
bookworm
1.41-1
fixed
sid
1.42-2
fixed
trixie
1.42-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libidn
zesty
not-affected
xenial
not-affected
trusty
not-affected
libidn2-0
zesty
not-affected
xenial
not-affected
trusty
not-affected
Common Weakness Enumeration
References
https://gitlab.com/libidn/libidn2/blob/master/NEWS
https://gitlab.com/libidn/libidn2/commit/16853b6973a1e72fee2b7cccda85472cb9951305
https://gitlab.com/libidn/libidn2/blob/master/NEWS
https://gitlab.com/libidn/libidn2/commit/16853b6973a1e72fee2b7cccda85472cb9951305