VDB

DEBIAN-CVE-2015-8948

DEBIAN-CVE-2015-8948 PUBLISHED CVSS 7.5 HIGH

idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read.

Risk Scores

CVSS 3.0
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersions
Debian:12libidn0
Debian:14libidn0
Debian:13libidn0

Timeline

  • Sep 7, 2016 CVE Published
  • Sep 9, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 50/day Open console ›