NetSight
IP …
high7.5

CVE-2016-6262

idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds …

Impact

idn in libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read, a different vulnerability than CVE-2015-8948.

Affected products

VendorProductAffected versions
GnuLibidn
through 1.32
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04
OpensuseLeap
Version 42.1
OpensuseOpensuse
Version 13.2

Weakness classification

CWE-125

References