CVE

Id
79336  
CVE No.
CVE-2015-2059  
Status
Candidate  
Description
The stringprep_utf8_to_ucs4 function in libin before 1.31, as used in jabberd2, allows context-dependent attackers to read system memory and possibly have other unspecified impact via invalid UTF-8 characters in a string, which triggers an out-of-bounds read.  
Phase
Assigned (20150223)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
721503 79336 CVE-2015-2059 MLIST:[oss-security] 20150223 Re: CVE Request: jabberd remote information disclosure  View
721504 79336 CVE-2015-2059 URL:http://www.openwall.com/lists/oss-security/2015/02/23/25  View
721505 79336 CVE-2015-2059 CONFIRM:http://git.savannah.gnu.org/cgit/libidn.git/commit/?id=2e97c279  View
721506 79336 CVE-2015-2059 CONFIRM:https://github.com/jabberd2/jabberd2/issues/85  View
721507 79336 CVE-2015-2059 DEBIAN:DSA-3578  View
721508 79336 CVE-2015-2059 URL:http://www.debian.org/security/2016/dsa-3578  View
721509 79336 CVE-2015-2059 FEDORA:FEDORA-2015-11562  View
721510 79336 CVE-2015-2059 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162549.html  View
721511 79336 CVE-2015-2059 FEDORA:FEDORA-2015-11621  View
721512 79336 CVE-2015-2059 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162537.html  View
721513 79336 CVE-2015-2059 SUSE:openSUSE-SU-2015:1261  View
721514 79336 CVE-2015-2059 URL:http://lists.opensuse.org/opensuse-updates/2015-07/msg00042.html  View
721515 79336 CVE-2015-2059 SUSE:openSUSE-SU-2016:2135  View
721516 79336 CVE-2015-2059 URL:http://lists.opensuse.org/opensuse-updates/2016-08/msg00098.html  View
721517 79336 CVE-2015-2059 UBUNTU:USN-3068-1  View
721518 79336 CVE-2015-2059 URL:http://www.ubuntu.com/usn/USN-3068-1  View
721519 79336 CVE-2015-2059 BID:72736  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
6770 JVNDB-2015-002090 Windows Server 2008 R2 および 2012 上で稼働する HP Intelligent Provisioning における重要な情報を取得される脆弱性 Windows Server 2008 R2 および 2012 上で稼働する HP Intelligent Provisioning には、重要な情報を取得される脆弱性が存在します。 CVE-2015-2111 79336 2.1 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002090.html  View