CVE-2017-14062
Summary
| CVE | CVE-2017-14062 |
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2017-08-31 16:29:00 UTC |
| Updated | 2020-12-07 20:17:00 UTC |
| Description | Integer overflow in the decode_digit function in puny_decode.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact. |
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| lib/puny_decode: Fix integer overflow (found by fuzzing) (3284eb34) · Commits · libidn / libidn2 · GitLab |
CONFIRM |
gitlab.com |
Patch, Third Party Advisory |
| Debian -- Security Information -- DSA-3988-1 libidn2-0 |
DEBIAN |
www.debian.org |
Third Party Advisory |
| NEWS · master · libidn / libidn2 · GitLab |
CONFIRM |
gitlab.com |
Release Notes, Third Party Advisory |
| [SECURITY] [DLA 1447-1] libidn security update |
MLIST |
lists.debian.org |
Mailing List, Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 670853 EulerOS Security Update for libidn (EulerOS-SA-2021-1084)