CVE catalog

CVE-2017-14061

libidn: CVE-2017-14061

[CVE catalog]

Severity
Low · CVSS 3.3CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Published
Source
[NVD] · [CVE record]
EPSS
2.40% · Oct 25, 2026

Integer overflow in the _isBidi function in bidi.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibidnsid1.44-1not affected
Debianlibidnforky1.44-1not affected
Debianlibidntrixie1.43-1not affected
Debianlibidnbookworm1.41-1not affected

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
DebianlibidnsourcesidNot affectedunimportantNot reportedNot reported
DebianlibidnsourceforkyNot affectedunimportantNot reportedNot reported
DebianlibidnsourcetrixieNot affectedunimportantNot reportedNot reported
DebianlibidnsourcebookwormNot affectedunimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [idn]Not affected

    Source package: [libidn]

    Details (2)
    • 1.41-1 · amd64 · bookworm

      Not affected

      dsa · libidn · debian · bookworm

    • 1.41-1 · arm64 · bookworm

      Not affected

      dsa · libidn · debian · bookworm

  • [libidn11-dev]Not affected

    Source package: [libidn]

    Details (2)
    • 1.41-1 · amd64 · bookworm

      Not affected

      dsa · libidn · debian · bookworm

    • 1.41-1 · arm64 · bookworm

      Not affected

      dsa · libidn · debian · bookworm

  • [libidn12]Not affected

    Source package: [libidn]

    Details (2)
    • 1.41-1 · amd64 · bookworm

      Not affected

      dsa · libidn · debian · bookworm

    • 1.41-1 · arm64 · bookworm

      Not affected

      dsa · libidn · debian · bookworm

  • [libidn-dev]Not affected

    Source package: [libidn]

    Details (2)
    • 1.41-1 · amd64 · bookworm

      Not affected

      dsa · libidn · debian · bookworm

    • 1.41-1 · arm64 · bookworm

      Not affected

      dsa · libidn · debian · bookworm

Observed:

References