Total vulnerabilities in the database
The stringprep_utf8_to_ucs4 function in libin before 1.31, as used in jabberd2, allows context-dependent attackers to read system memory and possibly have other unspecified impact via invalid UTF-8 characters in a string, which triggers an out-of-bounds read.
| Software | From | Fixed in |
|---|---|---|
| gnu / libidn | - | 1.30.x |
| opensuse / opensuse | 13.1 | 13.1.x |
| opensuse / opensuse | 13.2 | 13.2.x |
| fedoraproject / fedora | 22 | 22.x |
| fedoraproject / fedora | 21 | 21.x |