Critical severity9.8NVD Advisory· Published Aug 31, 2017· Updated May 13, 2026
CVE-2017-14062
CVE-2017-14062
Description
Integer overflow in the decode_digit function in puny_decode.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.
Affected products
4cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- gitlab.com/libidn/libidn2/commit/3284eb342cd0ed1a18786e3fcdf0cdd7e76676bdnvdPatchThird Party Advisory
- www.debian.org/security/2017/dsa-3988nvdThird Party Advisory
- gitlab.com/libidn/libidn2/blob/master/NEWSnvdRelease NotesThird Party Advisory
- lists.debian.org/debian-lts-announce/2018/07/msg00040.htmlnvdMailing ListThird Party Advisory
News mentions
0No linked articles in our index yet.