CVE-2017-14061

CWE-190 — Integer Overflow10 documents6 sources
Severity
9.8CRITICAL
EPSS
0.6%
top 31.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
GNU Libidn2
Timeline
PublishedAug 31
Latest updateMay 13

Description

Integer overflow in the _isBidi function in bidi.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

▶NVDgnu/libidn22.0.3

Patches

Patch: gitlab.com ↗Patch: gitlab.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-53w5-7mj5-5vvq: Integer overflow in the _isBidi function in bidi↗2022-05-13
▶
CVEList
CVE-2017-14061: Integer overflow in the _isBidi function in bidi↗2017-08-31
▶

📋Vendor Advisories

2
Red Hat
libidn2: integer overflow in bidi.c/_isBidi()↗2017-08-30
▶
Debian
CVE-2017-14061: libidn - Integer overflow in the _isBidi function in bidi.c in Libidn2 before 2.0.4 allow...↗2017
▶

💬Community

5
Bugzilla
CVE-2017-14061 mingw-libidn2: libidn2: integer overflow in bidi.c/_isBidi() [epel-7]↗2017-09-01
▶
Bugzilla
CVE-2017-14061 CVE-2017-14062 libidn2: various flaws [epel-all]↗2017-08-30
▶
Bugzilla
CVE-2017-14061 libidn2: integer overflow in bidi.c/_isBidi()↗2017-08-30
▶
Bugzilla
CVE-2017-14061 CVE-2017-14062 libidn2: various flaws [fedora-all]↗2017-08-30
▶
Bugzilla
CVE-2017-14061 CVE-2017-14062 mingw-libidn2: various flaws [fedora-all]↗2017-08-30
▶
CVE-2017-14061 (CRITICAL CVSS 9.8) | Integer overflow in the _isBidi fun | cvebase.io