Original commit message:
idna: fix OOB read in punycode decoder
Reported by Eric Sesterhenn in collaboration with
Cure53 and ExpressVPN.
Reported-By: Eric Sesterhenn <eric.sesterhenn@x41-dsec.de>
PR-URL: https://github.com/libuv/libuv-private/pull/1
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Richard Lau <rlau@redhat.com>
CVE-ID: CVE-2021-22918
Refs: https://hackerone.com/reports/1209681
PR-URL: https://github.com/nodejs-private/node-private/pull/267
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Richard Lau <rlau@redhat.com>
Reviewed-By: Michael Dawson <midawson@redhat.com>
Reviewed-By: Beth Griggs <bgriggs@redhat.com>
|
||
|---|---|---|
| .. | ||
| acorn | ||
| acorn-plugins | ||
| brotli | ||
| cares | ||
| cjs-module-lexer | ||
| histogram | ||
| icu-small | ||
| llhttp | ||
| nghttp2 | ||
| ngtcp2 | ||
| npm | ||
| openssl | ||
| uv | ||
| uvwasi | ||
| v8 | ||
| zlib | ||