CVE-2015-2059: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days.

The stringprep_utf8_to_ucs4 function in libin before 1.31, as used in jabberd2, allows context-dependent attackers to read system memory and possibly have other unspecified impact via invalid UTF-8 characters in a string, which triggers an out-of-bounds read.

Affected products

• Fedoraproject Fedora: version 21 only; version 22 only
• GNU Libidn: up to and including 1.30
• Opensuse Opensuse: version 13.1 only; version 13.2 only

Published 2015-08-12. Last modified 2026-06-17.