CVE-2015-8948 PUBLISHED

idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read.

EPSS 4.13% · 88.5th percentile

Risk Scores

EPSS Score
4.13%
88.5th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSlibidn0, 1.28-1ubuntu1, 1.28-1ubuntu2
Ubuntu:16.04:LTSlibidn0, 1.28-1ubuntu2, 1.32-3ubuntu1

Timeline

References

Open in Interactive Console →