CVE-2017-14061

CRITICAL

Libidn2 < 2.0.3 - Integer Overflow in _isBidi Function

Title source: llm

Description

Integer overflow in the _isBidi function in bidi.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.

References (2)

Core 2

Core References

Patch, Third Party Advisory x_refsource_confirm

https://gitlab.com/libidn/libidn2/commit/16853b6973a1e72fee2b7cccda85472cb9951305

View Patch ZIP pw:eip

Release Notes, Third Party Advisory x_refsource_confirm

https://gitlab.com/libidn/libidn2/blob/master/NEWS

View Writeup ZIP pw:eip

Scores

CVSS v3 9.8

EPSS 0.0240

EPSS Percentile 81.9%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-190

Status published

Products (1)

gnu/libidn2 < 2.0.3

Published Aug 31, 2017

Tracked Since Feb 18, 2026