Integer overflow in the _isBidi function in bidi.c in Libidn2 before 2.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact.

Libidn2 2.0.4 (released 2017-08-30) ===================================

  - Fix integer overflow in bidi.c/_isBidi()

  - Fix integer overflow in puny_decode.c/decode_digit()

  - Improve docs

  - Fix idna_free() to idn_free()

  - Update fuzzer corpora

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
105962	Fedora 27 : mingw-libidn2 (2017-b469be1a72)	Nessus	Fedora Local Security Checks	critical
105810	Fedora 27 : libidn2 (2017-09b1c3f099)	Nessus	Fedora Local Security Checks	critical
103108	Fedora 26 : mingw-libidn2 (2017-fe4f93fde4)	Nessus	Fedora Local Security Checks	critical
102936	Fedora 25 : libidn2 (2017-57722ccd30)	Nessus	Fedora Local Security Checks	critical
102934	Fedora 26 : libidn2 (2017-2d4ead8da9)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2017-14061

critical

Tenable Plugins

critical

critical

critical

critical

critical