CVE catalog

CVE-2024-12224

rust-idna: CVE-2024-12224

[CVE catalog]

Severity
Medium · CVSS 5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.22% · Oct 23, 2026

Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat as distinct while another part of that system would treat as equivalent to another hostname.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianrust-idnasid1.1.0-1fixed
Debianrust-idnaforky1.1.0-1fixed
Debianrust-idnatrixie1.0.3-2fixed
Debianrust-idnabookworm0.3.0-1vulnerable
Susesccachelinux enterprise server 16.00.18.0~2-160000.1.1fixed
Susesccachelinux enterprise server for sap applications 16.00.18.0~2-160000.1.1fixed
Opensuserustupleap 16.01.29.1~0-160000.1.1fixed
Opensusesccacheleap 16.00.18.0~2-160000.1.1fixed
Suserustuplinux enterprise module for development tools 15 sp71.28.2~0-150600.10.13.1fixed
Suserustuplinux enterprise server 15 sp6-ltss1.28.2~0-150600.10.13.1fixed
Suserustuplinux enterprise server for sap applications 15 sp61.28.2~0-150600.10.13.1fixed
Suserustuplinux enterprise high performance computing 15 sp4-espos1.28.2~0-150400.3.13.1fixed
Suserustuplinux enterprise high performance computing 15 sp4-ltss1.28.2~0-150400.3.13.1fixed
Suserustuplinux enterprise high performance computing 15 sp5-espos1.28.2~0-150400.3.13.1fixed
Suserustuplinux enterprise high performance computing 15 sp5-ltss1.28.2~0-150400.3.13.1fixed
Suserustuplinux enterprise server 15 sp4-ltss1.28.2~0-150400.3.13.1fixed
Suserustuplinux enterprise server 15 sp5-ltss1.28.2~0-150400.3.13.1fixed
Suserustuplinux enterprise server for sap applications 15 sp41.28.2~0-150400.3.13.1fixed
Suserustuplinux enterprise server for sap applications 15 sp51.28.2~0-150400.3.13.1fixed
Suselibrsvglinux enterprise server 16.02.60.2-160000.1.1fixed
Suselibrsvglinux enterprise server for sap applications 16.02.60.2-160000.1.1fixed
Opensuselibrsvgleap 16.02.60.2-160000.1.1fixed
Suselibrsvglinux micro 6.22.60.2-160000.1.1fixed
Opensusecargo-cleap 16.00.10.15-160000.1.1fixed
Opensusesccachetumbleweed0.12.0~1-1.1fixed
Opensuseafterburntumbleweed5.9.0.git21.a73f509-2.1fixed
Opensusecargo-audittumbleweed0.21.2~git0.18e58c2-2.1fixed
Opensusecargo-ctumbleweed0.10.3~git0.ee7d7ef-4.1fixed
Opensuserustuptumbleweed1.28.2~0-1.1fixed
Opensuserust-keylimetumbleweed0.2.7+70-2.1fixed
Opensusepython-seleniumtumbleweed4.25.0-5.1fixed
Opensusepython-nh3tumbleweed0.2.17-2.1fixed
Susecargo-clinux enterprise server 16.00.10.15-160000.1.1fixed
Susecargo-clinux enterprise server for sap applications 16.00.10.15-160000.1.1fixed
Suselibrsvglinux enterprise module for basesystem 15 sp72.57.4-150600.3.3.1fixed
Suselibrsvglinux enterprise module for desktop applications 15 sp72.57.4-150600.3.3.1fixed
Opensuselibrsvgleap 15.62.57.4-150600.3.3.1fixed
Suselibrsvglinux enterprise micro 5.32.52.12-150400.3.9.1fixed
Suselibrsvglinux enterprise micro 5.42.52.12-150400.3.9.1fixed
Suselibrsvglinux enterprise micro 5.52.52.12-150400.3.9.1fixed
Susesevctllinux micro 6.00.4.3-3.1fixed
Susesnpguestlinux enterprise module for server applications 15 sp60.3.2-150600.3.6.1fixed
Opensusesnpguestleap 15.60.3.2-150600.3.6.1fixed
Susesevctllinux micro 6.10.4.3-slfo.1.1_3.1fixed
Susesccachelinux enterprise module for development tools 15 sp60.4.2~4-150600.10.3.1fixed
Susesccachelinux enterprise module for development tools 15 sp70.4.2~4-150600.10.3.1fixed
Opensusesccacheleap 15.60.4.2~4-150600.10.3.1fixed
Susesevctllinux enterprise module for server applications 15 sp60.4.3-150600.4.3.1fixed
Opensusesevctlleap 15.60.4.3-150600.4.3.1fixed
Suserust-keylimelinux micro 6.00.2.7+70-1.1fixed
Susesevctllinux enterprise module for server applications 15 sp70.6.0-150700.3.3.1fixed
Suserust-keylimelinux micro 6.10.2.8+12-slfo.1.1_1.1fixed
Susesnpguestlinux enterprise module for server applications 15 sp70.10.0-150700.3.3.1fixed
Suseaws-nitro-enclaves-clilinux enterprise module for public cloud 15 sp61.4.2~git0.6e8512e-150600.10.6.1fixed
Suseaws-nitro-enclaves-clilinux enterprise module for public cloud 15 sp71.4.2~git0.6e8512e-150600.10.6.1fixed
Opensuseaws-nitro-enclaves-clileap 15.61.4.2~git0.6e8512e-150600.10.6.1fixed
Suserustuplinux enterprise module for development tools 15 sp61.26.0~0-150600.10.7.1fixed
Suserustuplinux enterprise module for development tools 15 sp71.26.0~0-150600.10.7.1fixed
Opensuserustupleap 15.61.26.0~0-150600.10.7.1fixed
Suseaws-nitro-enclaves-clilinux enterprise module for public cloud 15 sp41.4.2~git0.6e8512e-150400.3.9.1fixed
Suseaws-nitro-enclaves-clilinux enterprise module for public cloud 15 sp51.4.2~git0.6e8512e-150400.3.9.1fixed
Suserav1elinux enterprise module for basesystem 15 sp60.6.6-150600.3.3.1fixed
Suserav1elinux enterprise module for basesystem 15 sp70.6.6-150600.3.3.1fixed
Opensuserav1eleap 15.60.6.6-150600.3.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianrust-idnasourcesid1.0.3-2not yet assignedNot reported[1089662]
Debianrust-idnasourceforky1.0.3-2not yet assignedNot reported[1089662]
Debianrust-idnasourcetrixie1.0.3-2not yet assignedNot reported[1089662]
Debianrust-idnasourcebookworm(unfixed)not yet assignedNot reported[1089662]
Susesccacherpmlinux enterprise server 16.00.18.0~2-160000.1.1Not reportedSUSE-SU-2026:23983-1Not reported
Susesccacherpmlinux enterprise server for sap applications 16.00.18.0~2-160000.1.1Not reportedSUSE-SU-2026:23983-1Not reported
Opensuserustuprpmleap 16.01.29.1~0-160000.1.1Not reportedOPENSUSE-SU-2026:22016-1Not reported
Opensusesccacherpmleap 16.00.18.0~2-160000.1.1Not reportedOPENSUSE-SU-2026:21982-1Not reported
Suserustuprpmlinux enterprise module for development tools 15 sp71.28.2~0-150600.10.13.1Not reportedSUSE-SU-2026:2832-1Not reported
Suserustuprpmlinux enterprise server 15 sp6-ltss1.28.2~0-150600.10.13.1Not reportedSUSE-SU-2026:2832-1Not reported
Suserustuprpmlinux enterprise server for sap applications 15 sp61.28.2~0-150600.10.13.1Not reportedSUSE-SU-2026:2832-1Not reported
Suserustuprpmlinux enterprise high performance computing 15 sp4-espos1.28.2~0-150400.3.13.1Not reportedSUSE-SU-2026:2831-1Not reported
Suserustuprpmlinux enterprise high performance computing 15 sp4-ltss1.28.2~0-150400.3.13.1Not reportedSUSE-SU-2026:2831-1Not reported
Suserustuprpmlinux enterprise high performance computing 15 sp5-espos1.28.2~0-150400.3.13.1Not reportedSUSE-SU-2026:2831-1Not reported
Suserustuprpmlinux enterprise high performance computing 15 sp5-ltss1.28.2~0-150400.3.13.1Not reportedSUSE-SU-2026:2831-1Not reported
Suserustuprpmlinux enterprise server 15 sp4-ltss1.28.2~0-150400.3.13.1Not reportedSUSE-SU-2026:2831-1Not reported
Suserustuprpmlinux enterprise server 15 sp5-ltss1.28.2~0-150400.3.13.1Not reportedSUSE-SU-2026:2831-1Not reported
Suserustuprpmlinux enterprise server for sap applications 15 sp41.28.2~0-150400.3.13.1Not reportedSUSE-SU-2026:2831-1Not reported
Suserustuprpmlinux enterprise server for sap applications 15 sp51.28.2~0-150400.3.13.1Not reportedSUSE-SU-2026:2831-1Not reported
Suselibrsvgrpmlinux enterprise server 16.02.60.2-160000.1.1Not reportedSUSE-SU-2026:20910-1Not reported
Suselibrsvgrpmlinux enterprise server for sap applications 16.02.60.2-160000.1.1Not reportedSUSE-SU-2026:20910-1Not reported
Opensuselibrsvgrpmleap 16.02.60.2-160000.1.1Not reportedOPENSUSE-SU-2026:20396-1Not reported
Suselibrsvgrpmlinux micro 6.22.60.2-160000.1.1Not reportedSUSE-SU-2026:20755-1Not reported
Opensusecargo-crpmleap 16.00.10.15-160000.1.1Not reportedOPENSUSE-SU-2026:20060-1Not reported
Opensusesccacherpmtumbleweed0.12.0~1-1.1Not reportedOPENSUSE-SU-2025:15656-1Not reported
Opensuseafterburnrpmtumbleweed5.9.0.git21.a73f509-2.1Not reportedOPENSUSE-SU-2025:15588-1Not reported
Opensusecargo-auditrpmtumbleweed0.21.2~git0.18e58c2-2.1Not reportedOPENSUSE-SU-2025:15550-1Not reported
Opensusecargo-crpmtumbleweed0.10.3~git0.ee7d7ef-4.1Not reportedOPENSUSE-SU-2025:15551-1Not reported
Opensuserustuprpmtumbleweed1.28.2~0-1.1Not reportedOPENSUSE-SU-2025:15353-1Not reported
Opensuserust-keylimerpmtumbleweed0.2.7+70-2.1Not reportedOPENSUSE-SU-2025:15294-1Not reported
Opensusepython-seleniumrpmtumbleweed4.25.0-5.1Not reportedOPENSUSE-SU-2025:15202-1Not reported
Opensusepython-nh3rpmtumbleweed0.2.17-2.1Not reportedOPENSUSE-SU-2025:15201-1Not reported
Susecargo-crpmlinux enterprise server 16.00.10.15-160000.1.1Not reportedSUSE-SU-2026:20096-1Not reported
Susecargo-crpmlinux enterprise server for sap applications 16.00.10.15-160000.1.1Not reportedSUSE-SU-2026:20096-1Not reported
Suselibrsvgrpmlinux enterprise module for basesystem 15 sp72.57.4-150600.3.3.1Not reportedSUSE-SU-2026:0243-1Not reported
Suselibrsvgrpmlinux enterprise module for desktop applications 15 sp72.57.4-150600.3.3.1Not reportedSUSE-SU-2026:0243-1Not reported
Opensuselibrsvgrpmleap 15.62.57.4-150600.3.3.1Not reportedSUSE-SU-2026:0243-1Not reported
Suselibrsvgrpmlinux enterprise micro 5.32.52.12-150400.3.9.1Not reportedSUSE-SU-2025:4411-1Not reported
Suselibrsvgrpmlinux enterprise micro 5.42.52.12-150400.3.9.1Not reportedSUSE-SU-2025:4411-1Not reported
Suselibrsvgrpmlinux enterprise micro 5.52.52.12-150400.3.9.1Not reportedSUSE-SU-2025:4411-1Not reported
Susesevctlrpmlinux micro 6.00.4.3-3.1Not reportedSUSE-SU-2025:20716-1Not reported
Susesnpguestrpmlinux enterprise module for server applications 15 sp60.3.2-150600.3.6.1Not reportedSUSE-SU-2025:03445-1Not reported
Opensusesnpguestrpmleap 15.60.3.2-150600.3.6.1Not reportedSUSE-SU-2025:03445-1Not reported
Susesevctlrpmlinux micro 6.10.4.3-slfo.1.1_3.1Not reportedSUSE-SU-2025:20783-1Not reported
Susesccacherpmlinux enterprise module for development tools 15 sp60.4.2~4-150600.10.3.1Not reportedSUSE-SU-2025:02768-1Not reported
Susesccacherpmlinux enterprise module for development tools 15 sp70.4.2~4-150600.10.3.1Not reportedSUSE-SU-2025:02768-1Not reported
Opensusesccacherpmleap 15.60.4.2~4-150600.10.3.1Not reportedSUSE-SU-2025:02768-1Not reported
Susesevctlrpmlinux enterprise module for server applications 15 sp60.4.3-150600.4.3.1Not reportedSUSE-SU-2025:03307-1Not reported
Opensusesevctlrpmleap 15.60.4.3-150600.4.3.1Not reportedSUSE-SU-2025:03307-1Not reported
Suserust-keylimerpmlinux micro 6.00.2.7+70-1.1Not reportedSUSE-SU-2025:20491-1Not reported
Susesevctlrpmlinux enterprise module for server applications 15 sp70.6.0-150700.3.3.1Not reportedSUSE-SU-2025:03306-1Not reported
Suserust-keylimerpmlinux micro 6.10.2.8+12-slfo.1.1_1.1Not reportedSUSE-SU-2025:20858-1Not reported
Susesnpguestrpmlinux enterprise module for server applications 15 sp70.10.0-150700.3.3.1Not reportedSUSE-SU-2026:0620-1Not reported
Suseaws-nitro-enclaves-clirpmlinux enterprise module for public cloud 15 sp61.4.2~git0.6e8512e-150600.10.6.1Not reportedSUSE-RU-2025:02204-1Not reported
Suseaws-nitro-enclaves-clirpmlinux enterprise module for public cloud 15 sp71.4.2~git0.6e8512e-150600.10.6.1Not reportedSUSE-RU-2025:02204-1Not reported
Opensuseaws-nitro-enclaves-clirpmleap 15.61.4.2~git0.6e8512e-150600.10.6.1Not reportedSUSE-RU-2025:02204-1Not reported
Suserustuprpmlinux enterprise module for development tools 15 sp61.26.0~0-150600.10.7.1Not reportedSUSE-SU-2025:03298-1Not reported
Suserustuprpmlinux enterprise module for development tools 15 sp71.26.0~0-150600.10.7.1Not reportedSUSE-SU-2025:03298-1Not reported
Opensuserustuprpmleap 15.61.26.0~0-150600.10.7.1Not reportedSUSE-SU-2025:03298-1Not reported
Suseaws-nitro-enclaves-clirpmlinux enterprise module for public cloud 15 sp41.4.2~git0.6e8512e-150400.3.9.1Not reportedSUSE-RU-2025:02203-1Not reported
Suseaws-nitro-enclaves-clirpmlinux enterprise module for public cloud 15 sp51.4.2~git0.6e8512e-150400.3.9.1Not reportedSUSE-RU-2025:02203-1Not reported
Suserav1erpmlinux enterprise module for basesystem 15 sp60.6.6-150600.3.3.1Not reportedSUSE-SU-2025:02586-1Not reported
Suserav1erpmlinux enterprise module for basesystem 15 sp70.6.6-150600.3.3.1Not reportedSUSE-SU-2025:02586-1Not reported
Opensuserav1erpmleap 15.60.6.6-150600.3.3.1Not reportedSUSE-SU-2025:02586-1Not reported

[Debian bug #1089662]

Notes

[bookworm] rust-idna: Minor issue

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • Source package: [rust-idna]

    Details (2)
    • 0.3.0-1 · amd64 · bookworm

      Affected

      dsa · rust-idna · debian · bookworm; dsa · rust-idna · debian · 12

    • 0.3.0-1 · arm64 · bookworm

      Affected

      dsa · rust-idna · debian · bookworm; dsa · rust-idna · debian · 12

[Debian 13 (Trixie)]

  • Source package: [rust-idna]

    Details (2)
    • 1.0.3-2 · amd64 · trixie

      Fixed · Fixed: 1.0.3-2

      dsa · rust-idna · debian · 13

    • 1.0.3-2 · arm64 · trixie

      Fixed · Fixed: 1.0.3-2

      dsa · rust-idna · debian · 13

[openSUSE Tumbleweed]

  • [afterburn]Unknown

    Source package: [afterburn]

    Details (1)
    • 5.10.0.git73.b97f772-2.1 · x86_64 · tumbleweed

      Fixed · Fixed: 5.9.0.git21.a73f509-2.1

      dsa · afterburn · opensuse · tumbleweed

  • Source package: [afterburn]

    Details (1)
    • 5.10.0.git73.b97f772-2.1 · noarch · tumbleweed

      Unknown · Fixed: 5.9.0.git21.a73f509-2.1

      Version impact unknown

      dsa · afterburn · opensuse · tumbleweed

  • [cargo-audit]Unknown

    Source package: [cargo-audit]

    Details (1)
    • 0.22.2~git0.281452c-2.1 · x86_64 · tumbleweed

      Fixed · Fixed: 0.21.2~git0.18e58c2-2.1

      dsa · cargo-audit · opensuse · tumbleweed

  • [cargo-c]Unknown

    Source package: [cargo-c]

    Details (1)
    • 0.10.23-2.1 · x86_64 · tumbleweed

      Fixed · Fixed: 0.10.3~git0.ee7d7ef-4.1

      dsa · cargo-c · opensuse · tumbleweed

  • Source package: [rust-keylime]

    Details (1)
    • 0.2.9+49-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 0.2.7+70-2.1

      Version impact unknown

      dsa · rust-keylime · opensuse · tumbleweed

  • [python313-nh3]Unknown

    Source package: [python-nh3]

    Details (1)
    • 0.3.6-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 0.2.17-2.1

      Version impact unknown

      dsa · python-nh3 · opensuse · tumbleweed

  • Source package: [python-selenium]

    Details (1)
    • 4.45.0-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.25.0-5.1

      Version impact unknown

      dsa · python-selenium · opensuse · tumbleweed

  • [python314-nh3]Unknown

    Source package: [python-nh3]

    Details (1)
    • 0.3.6-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 0.2.17-2.1

      Version impact unknown

      dsa · python-nh3 · opensuse · tumbleweed

  • Source package: [python-selenium]

    Details (1)
    • 4.45.0-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.25.0-5.1

      Version impact unknown

      dsa · python-selenium · opensuse · tumbleweed

  • [rust-keylime]Unknown

    Source package: [rust-keylime]

    Details (1)
    • 0.2.9+49-1.2 · x86_64 · tumbleweed

      Fixed · Fixed: 0.2.7+70-2.1

      dsa · rust-keylime · opensuse · tumbleweed

  • [rustup]Unknown

    Source package: [rustup]

    Details (1)
    • 1.29.0~0-1.1 · x86_64 · tumbleweed

      Fixed · Fixed: 1.28.2~0-1.1

      dsa · rustup · opensuse · tumbleweed

  • [sccache]Unknown

    Source package: [sccache]

    Details (1)
    • 0.17.0~1-2.1 · x86_64 · tumbleweed

      Fixed · Fixed: 0.12.0~1-1.1

      dsa · sccache · opensuse · tumbleweed

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]