Alpine/libidn2: critical 9.8

idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.

Action: Upgrade libidn2 to 2.1.1-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2019-18224#Alpine:v3.19/libidn2
• https://security.alpinelinux.org/vuln/CVE-2019-18224

published 2019-10-21T17:15:09.930Z · modified 2026-09-21T06:17:52.501534942Z · JSON