Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-39821

Опубликовано: 22 мая 2026
Источник: ubuntu
Приоритет: high
CVSS3: 9.6

Описание

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".

РелизСтатусПримечание
devel

needs-triage

esm-infra/focal

needs-triage

focal

ignored

end of standard support
jammy

needs-triage

noble

needs-triage

resolute

needs-triage

stonking

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

needs-triage

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/noble

needs-triage

esm-apps/resolute

needs-triage

esm-apps/xenial

ignored

end of ESM support
esm-infra/focal

needs-triage

focal

ignored

end of standard support
jammy

needs-triage

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

resolute

DNE

stonking

DNE

trusty

ignored

end of standard support

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra-legacy/trusty

needs-triage

esm-infra-legacy/xenial

needs-triage

esm-infra/bionic

needs-triage

esm-infra/focal

DNE

esm-infra/xenial

ignored

end of ESM support
focal

DNE

jammy

DNE

noble

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/jammy

needs-triage

esm-apps/xenial

ignored

end of ESM support
esm-infra-legacy/trusty

DNE

esm-infra/focal

needs-triage

focal

ignored

end of standard support
jammy

needs-triage

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

needs-triage

focal

ignored

end of standard support
jammy

DNE

noble

DNE

resolute

DNE

stonking

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

focal

ignored

end of standard support
jammy

DNE

noble

DNE

resolute

DNE

stonking

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

needs-triage

noble

DNE

resolute

DNE

stonking

DNE

trusty

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/xenial

ignored

end of ESM support
focal

ignored

end of standard support
jammy

released

1.18.1-1ubuntu1.3
noble

DNE

resolute

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

resolute

DNE

stonking

DNE

trusty

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

focal

ignored

end of standard support
jammy

needs-triage

noble

DNE

resolute

DNE

stonking

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-apps/focal

needs-triage

esm-apps/jammy

released

1.21.1-1~ubuntu22.04.4
esm-apps/noble

needs-triage

focal

ignored

end of standard support
jammy

released

1.21.1-1~ubuntu22.04.4
noble

needs-triage

resolute

DNE

stonking

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

focal

ignored

end of standard support
jammy

needs-triage

noble

needs-triage

resolute

DNE

stonking

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-apps/jammy

released

1.23.1-1~22.04.3
esm-apps/noble

needs-triage

esm-apps/resolute

needs-triage

focal

DNE

jammy

released

1.23.1-1~22.04.3
noble

needs-triage

resolute

needs-triage

stonking

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-apps/jammy

released

1.24.13-2~22.04.2
esm-apps/noble

needs-triage

esm-infra/focal

DNE

focal

DNE

jammy

released

1.24.13-2~22.04.2
noble

needs-triage

resolute

needs-triage

stonking

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

focal

DNE

jammy

needs-triage

noble

needs-triage

resolute

needs-triage

stonking

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

focal

DNE

jammy

needs-triage

noble

needs-triage

resolute

needs-triage

stonking

needs-triage

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

needs-triage

focal

DNE

jammy

DNE

noble

DNE

resolute

DNE

stonking

needs-triage

trusty

DNE

upstream

needs-triage

xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra-legacy/xenial

needs-triage

esm-infra/focal

DNE

esm-infra/xenial

ignored

end of ESM support
focal

DNE

jammy

DNE

noble

DNE

resolute

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-apps/bionic

needs-triage

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

resolute

DNE

stonking

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-apps/bionic

needs-triage

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

resolute

DNE

stonking

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

needed

esm-apps/jammy

released

1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1
esm-apps/noble

needed

esm-apps/resolute

needed

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

jammy

released

1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1
noble

needed

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/bionic

released

1:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm3
esm-apps/focal

released

1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm3
esm-infra-legacy/xenial

not-affected

code not present
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

stonking

DNE

upstream

not-affected

0.55.0

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

needs-triage

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/xenial

ignored

end of ESM support
esm-infra-legacy/trusty

DNE

esm-infra/focal

needs-triage

focal

ignored

end of standard support
jammy

released

20250116.00-0ubuntu1~22.04.4
noble

needs-triage

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

needs-triage

esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/xenial

ignored

end of ESM support
focal

ignored

end of standard support
jammy

released

20251028.00-0ubuntu2~22.04.1
noble

needs-triage

resolute

needs-triage

Показывать по

РелизСтатусПримечание
esm-infra-legacy/xenial

needs-triage

esm-infra/xenial

ignored

end of ESM support
upstream

needs-triage

xenial

ignored

end of standard support

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
esm-apps/focal

needs-triage

esm-infra-legacy/xenial

needs-triage

esm-infra/bionic

needs-triage

esm-infra/xenial

ignored

end of ESM support
focal

ignored

end of standard support
upstream

needs-triage

xenial

ignored

end of standard support

Показывать по

Ссылки на источники

9.6 Critical

CVSS3

Связанные уязвимости

redhat логотип

CVE-2026-39821

CVSS3: 8.2
redhat
5 месяцев назад

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".

nvd логотип

CVE-2026-39821

CVSS3: 9.6
nvd
5 месяцев назад

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject "example.com" but permit "xn--example-.com". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name "example.com".

msrc логотип

CVE-2026-39821

CVSS3: 10
msrc
5 месяцев назад

Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna

debian логотип

CVE-2026-39821

CVSS3: 9.6
debian
5 месяцев назад

The ToASCII and ToUnicode functions incorrectly accept Punycode-encode ...

suse-cvrf логотип

openSUSE-SU-2026:21562-1

suse-cvrf
3 месяца назад

Security update for go-sendxmpp

9.6 Critical

CVSS3