FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

libidn -- out-of-bounds read issue with invalid UTF-8 input

Affected packages
libidn < 1.31

Details

VuXML ID 4caf01e2-30e6-11e5-a4a5-002590263bf5
Discovery 2015-02-09
Entry 2015-07-23
Modified 2015-08-03

Simon Josefsson reports:

stringprep_utf8_to_ucs4 now rejects invalid UTF-8. This function has always been documented to not validate that the input UTF-8 string is actually valid UTF-8...

References

CVE Name CVE-2015-2059
URL http://git.savannah.gnu.org/cgit/libidn.git/plain/NEWS?id=libidn-1-31