Описание
idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read, a different vulnerability than CVE-2015-8948.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | libidn | Will not fix | ||
| Red Hat Enterprise Linux 6 | libidn | Will not fix | ||
| Red Hat Enterprise Linux 7 | libidn | Will not fix |
Показывать по
Дополнительная информация
Статус:
3.7 Low
CVSS3
2.6 Low
CVSS2
Связанные уязвимости
idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read, a different vulnerability than CVE-2015-8948.
idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read, a different vulnerability than CVE-2015-8948.
idn in libidn before 1.33 might allow remote attackers to obtain sensi ...
idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read, a different vulnerability than CVE-2015-8948.
ALT-PU-2016-1770: package `libidn` update to version 1.33-alt1
3.7 Low
CVSS3
2.6 Low
CVSS2