[{"CVE":"CVE-2019-18224","severity":"moderate","public_date":"2019-01-07T00:00:00Z","advisories":[],"bugzilla":"1764780","bugzilla_description":"CVE-2019-18224 libidn2: heap-based buffer overflow in idn2_to_ascii_4i in lib/lookup.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-122","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-18224.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2017-14061","severity":"low","public_date":"2017-08-30T00:00:00Z","advisories":[],"bugzilla":"1486881","bugzilla_description":"CVE-2017-14061 libidn2: integer overflow in bidi.c/_isBidi()","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14061.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2017-14062","severity":"low","public_date":"2017-08-30T00:00:00Z","advisories":[],"bugzilla":"1486882","bugzilla_description":"CVE-2017-14062 libidn2: Integer overflow in puny_decode.c/decode_digit","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-190","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14062.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-6261","severity":"low","public_date":"2016-07-20T00:00:00Z","advisories":[],"bugzilla":"1359134","bugzilla_description":"CVE-2016-6261 libidn: Out of bounds stack read in idna_to_ascii_4i","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6261.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2016-6262","severity":"low","public_date":"2016-01-14T00:00:00Z","advisories":[],"bugzilla":"1359138","bugzilla_description":"CVE-2016-6262 libidn: Out-of-bounds read when reading zero byte as input","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6262.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2016-6263","severity":"low","public_date":"2016-01-14T00:00:00Z","advisories":[],"bugzilla":"1359145","bugzilla_description":"CVE-2016-6263 libidn: Crash when given invalid UTF-8 data on input","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":"CWE-20","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6263.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.7"},{"CVE":"CVE-2015-8948","severity":"low","public_date":"2015-08-10T00:00:00Z","advisories":[],"bugzilla":"1359141","bugzilla_description":"CVE-2015-8948 libidn: Out-of-bounds read due to use of fgets with fixed-size buffer","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8948.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"3.7"},{"CVE":"CVE-2015-2059","severity":"low","public_date":"2015-02-23T00:00:00Z","advisories":[],"bugzilla":"1197796","bugzilla_description":"CVE-2015-2059 libidn: out-of-bounds read with stringprep on invalid UTF-8","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","CWE":"CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-2059.json"}]