CVE-2016-6262 PUBLISHED

idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read, a different vulnerability than CVE-2015-8948.

EPSS 4.75% · 89.4th percentile

Risk Scores

EPSS Score
4.75%
89.4th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlibidn1.28-1ubuntu2, 1.32-3ubuntu1, 0
Ubuntu:14.04:LTSlibidn1.28-1ubuntu1, 1.28-1ubuntu2, 0

Timeline

References

Open in Interactive Console →