CVE-2015-2059

The stringprep_utf8_to_ucs4 function in libin before 1.31, as used in jabberd2, allows context-dependent attackers to read system memory and possibly have…

published August 12, 2015

CVSS
—
EPSS
3%
Percentile
88.0
In the wild
Unconfirmed
What it is

The stringprep_utf8_to_ucs4 function in libin before 1.31, as used in jabberd2, allows context-dependent attackers to read system memory and possibly have other unspecified impact via invalid UTF-8 characters in a string, which triggers an out-of-bounds read.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03185 · 88.0th percentile
Published
2015-08-12T14:00Z
EPSS history
Timeline
  • 12 AUG 14:00Z
    The stringprep_utf8_to_ucs4 function in libin before 1.31, as used in jabberd2, allows context-dependent attackers to read system memory and possibly have…
    cvelistv5