USN-3434-1: Libidn vulnerability
2 October 2017
Libidn could be made to crash or run programs if it processed specially crafted input.
Releases
Packages
- libidn - implementation of IETF IDN specifications
Details
It was discovered that Libidn incorrectly handled decoding certain digits.
A remote attacker could use this issue to cause Libidn to crash, resulting
in a denial of service, or possibly execute arbitrary code.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 17.04
Ubuntu 16.04
Ubuntu 14.04
In general, a standard system update will make all the necessary changes.
References
Related notices
- USN-3434-2: libidn, libidn11
- USN-3421-1: idn2, libidn2-0
- USN-3421-2: libidn2-0-dev, idn2, libidn2-0