Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-18224

idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.024
EPSS Ranking 84.1%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
Products affected by CVE-2019-18224
  • Gnu » Libidn2 » Version: 0.10
    cpe:2.3:a:gnu:libidn2:0.10
  • Gnu » Libidn2 » Version: 0.11
    cpe:2.3:a:gnu:libidn2:0.11
  • Gnu » Libidn2 » Version: 0.12
    cpe:2.3:a:gnu:libidn2:0.12
  • Gnu » Libidn2 » Version: 0.13
    cpe:2.3:a:gnu:libidn2:0.13
  • Gnu » Libidn2 » Version: 0.14
    cpe:2.3:a:gnu:libidn2:0.14
  • Gnu » Libidn2 » Version: 0.15
    cpe:2.3:a:gnu:libidn2:0.15
  • Gnu » Libidn2 » Version: 0.16
    cpe:2.3:a:gnu:libidn2:0.16
  • Gnu » Libidn2 » Version: 0.3
    cpe:2.3:a:gnu:libidn2:0.3
  • Gnu » Libidn2 » Version: 0.4
    cpe:2.3:a:gnu:libidn2:0.4
  • Gnu » Libidn2 » Version: 0.5
    cpe:2.3:a:gnu:libidn2:0.5
  • Gnu » Libidn2 » Version: 0.6
    cpe:2.3:a:gnu:libidn2:0.6
  • Gnu » Libidn2 » Version: 0.7
    cpe:2.3:a:gnu:libidn2:0.7
  • Gnu » Libidn2 » Version: 0.8
    cpe:2.3:a:gnu:libidn2:0.8
  • Gnu » Libidn2 » Version: 0.9
    cpe:2.3:a:gnu:libidn2:0.9
  • Gnu » Libidn2 » Version: 2.0.0
    cpe:2.3:a:gnu:libidn2:2.0.0
  • Gnu » Libidn2 » Version: 2.0.1
    cpe:2.3:a:gnu:libidn2:2.0.1
  • Gnu » Libidn2 » Version: 2.0.2
    cpe:2.3:a:gnu:libidn2:2.0.2
  • Gnu » Libidn2 » Version: 2.0.3
    cpe:2.3:a:gnu:libidn2:2.0.3
  • Gnu » Libidn2 » Version: 2.0.4
    cpe:2.3:a:gnu:libidn2:2.0.4
  • Gnu » Libidn2 » Version: 2.0.5
    cpe:2.3:a:gnu:libidn2:2.0.5
  • Gnu » Libidn2 » Version: 2.1.0
    cpe:2.3:a:gnu:libidn2:2.1.0


Contact Us

Shodan ® - All rights reserved