CVE-2016-6262

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2016-6262
idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read, a different vulnerability than CVE-2015-8948.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=5e3cb9c7b5bf0ce665b9d68f5ddf095af5c9ba60 Issue Tracking Patch
http://lists.opensuse.org/opensuse-updates/2016-08/msg00005.html Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/07/20/6 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/07/21/4 Mailing List Third Party Advisory
http://www.securityfocus.com/bid/92070 Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-3068-1 Third Party Advisory
https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
https://lists.gnu.org/archive/html/help-libidn/2016-07/msg00009.html Vendor Advisory
http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=5e3cb9c7b5bf0ce665b9d68f5ddf095af5c9ba60 Issue Tracking Patch
http://lists.opensuse.org/opensuse-updates/2016-08/msg00005.html Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/07/20/6 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/07/21/4 Mailing List Third Party Advisory
http://www.securityfocus.com/bid/92070 Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-3068-1 Third Party Advisory
https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
https://lists.gnu.org/archive/html/help-libidn/2016-07/msg00009.html Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:gnu:libidn:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*
History

21 Nov 2024, 02:55

Type Values Removed Values Added
References () http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=5e3cb9c7b5bf0ce665b9d68f5ddf095af5c9ba60 - Issue Tracking, Patch () http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=5e3cb9c7b5bf0ce665b9d68f5ddf095af5c9ba60 - Issue Tracking, Patch
References () http://lists.opensuse.org/opensuse-updates/2016-08/msg00005.html - Third Party Advisory () http://lists.opensuse.org/opensuse-updates/2016-08/msg00005.html - Third Party Advisory
References () http://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html - Third Party Advisory () http://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html - Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2016/07/20/6 - Mailing List, Third Party Advisory () http://www.openwall.com/lists/oss-security/2016/07/20/6 - Mailing List, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2016/07/21/4 - Mailing List, Third Party Advisory () http://www.openwall.com/lists/oss-security/2016/07/21/4 - Mailing List, Third Party Advisory
References () http://www.securityfocus.com/bid/92070 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/92070 - Third Party Advisory, VDB Entry
References () http://www.ubuntu.com/usn/USN-3068-1 - Third Party Advisory () http://www.ubuntu.com/usn/USN-3068-1 - Third Party Advisory
References () https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E - () https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E -
References () https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E - () https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E -
References () https://lists.gnu.org/archive/html/help-libidn/2016-07/msg00009.html - Vendor Advisory () https://lists.gnu.org/archive/html/help-libidn/2016-07/msg00009.html - Vendor Advisory

07 Nov 2023, 02:33

Type Values Removed Values Added
References
  • {'url': 'https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E', 'name': '[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8', 'tags': [], 'refsource': 'MLIST'}
  • {'url': 'https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E', 'name': '[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8', 'tags': [], 'refsource': 'MLIST'}
  • () https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E -
  • () https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E -
Information

Published : 2016-09-07 20:59

Updated : 2025-04-12 10:46

NVD link : CVE-2016-6262

Mitre link : CVE-2016-6262

CVE.ORG link : CVE-2016-6262

JSON object : View

Products Affected

opensuse

  • opensuse
  • leap

canonical

  • ubuntu_linux

gnu

  • libidn
CWE
CWE-125

Out-of-bounds Read