Поиск уязвимостей
Количество 9
Количество 9
CVE-2019-12290
GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it possible in some circumstances for one domain to impersonate another. By creating a malicious domain that matches a target domain except for the inclusion of certain punycoded Unicode characters (that would be discarded when converted first to a Unicode label and then back to an ASCII label), arbitrary domains can be impersonated.
CVE-2019-12290
GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it possible in some circumstances for one domain to impersonate another. By creating a malicious domain that matches a target domain except for the inclusion of certain punycoded Unicode characters (that would be discarded when converted first to a Unicode label and then back to an ASCII label), arbitrary domains can be impersonated.
CVE-2019-12290
GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specifi ...
GHSA-5pjp-55fh-7frw
GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it possible in some circumstances for one domain to impersonate another. By creating a malicious domain that matches a target domain except for the inclusion of certain punycoded Unicode characters (that would be discarded when converted first to a Unicode label and then back to an ASCII label), arbitrary domains can be impersonated.
BDU:2020-01339
Уязвимость компонента RFC3490 библиотеки Libidn2, позволяющая нарушителю создать вредоносный домен, который соответствует целевому домену
openSUSE-SU-2019:2613-1
Security update for libidn2
openSUSE-SU-2019:2611-1
Security update for libidn2
SUSE-SU-2019:3086-1
Security update for libidn2
ALT-PU-2019-1902
ALT-PU-2019-1902: package `libidn2` update to version 2.2.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2019-12290 GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it possible in some circumstances for one domain to impersonate another. By creating a malicious domain that matches a target domain except for the inclusion of certain punycoded Unicode characters (that would be discarded when converted first to a Unicode label and then back to an ASCII label), arbitrary domains can be impersonated. | CVSS3: 7.5 | 3% Низкий | около 7 лет назад |
 | CVE-2019-12290 GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it possible in some circumstances for one domain to impersonate another. By creating a malicious domain that matches a target domain except for the inclusion of certain punycoded Unicode characters (that would be discarded when converted first to a Unicode label and then back to an ASCII label), arbitrary domains can be impersonated. | CVSS3: 7.5 | 3% Низкий | около 7 лет назад |
| CVE-2019-12290 GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specifi ... | CVSS3: 7.5 | 3% Низкий | около 7 лет назад |
| GHSA-5pjp-55fh-7frw GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-labels to U-labels. This makes it possible in some circumstances for one domain to impersonate another. By creating a malicious domain that matches a target domain except for the inclusion of certain punycoded Unicode characters (that would be discarded when converted first to a Unicode label and then back to an ASCII label), arbitrary domains can be impersonated. | CVSS3: 7.5 | 3% Низкий | больше 4 лет назад |
 | BDU:2020-01339 Уязвимость компонента RFC3490 библиотеки Libidn2, позволяющая нарушителю создать вредоносный домен, который соответствует целевому домену | CVSS3: 7.5 | 3% Низкий | почти 7 лет назад |
 | openSUSE-SU-2019:2613-1 Security update for libidn2 | почти 7 лет назад | ||
| openSUSE-SU-2019:2611-1 Security update for libidn2 | почти 7 лет назад | ||
| SUSE-SU-2019:3086-1 Security update for libidn2 | почти 7 лет назад | ||
| ALT-PU-2019-1902 ALT-PU-2019-1902: package `libidn2` update to version 2.2.0-alt1 | CVSS3: 7.5 | 3% Низкий | больше 7 лет назад |
Уязвимостей на страницу