PT-2026-42782 · Pypi+3 · Idna+3
CVSS v3.1
9.8
Crítica
| Vetor base | Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Nome do Software Vulnerável e Versões Afetadas
idna (versões afetadas não especificadas)
Descrição
As funções
ToASCII() e ToUnicode() aceitam incorretamente rótulos codificados em Punycode que são decodificados para um rótulo apenas ASCII. Por exemplo, ToUnicode("xn--example-.com") retorna "example.com" em vez de um erro. Esse comportamento pode levar à escalada de privilégios em programas que utilizam o pacote idna; um programa que realiza verificações de privilégios em um nome de host ASCII pode rejeitar "example.com", mas permitir "xn--example-.com", concedendo inadvertidamente acesso a "example.com" após converter o nome do host para Unicode.Recomendações
No momento, não há informações sobre uma versão mais recente que contenha a correção para esta vulnerabilidade.
Exploit
DoS
LPE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
ALSA-2026:30853
ALSA-2026:30854
ALSA-2026:30855
ALSA-2026:34357
ALSA-2026:34359
ALSA-2026:35826
ALSA-2026:35827
ALSA-2026:35828
ALSA-2026:35829
ALSA-2026:35830
ALSA-2026:35831
ALSA-2026:37435
ALSA-2026:37436
ALSA-2026:38995
ALSA-2026:39573
ALSA-2026:46395
CLEANSTART-2026-AD30368
CLEANSTART-2026-AG91746
CLEANSTART-2026-AK43046
CLEANSTART-2026-AP31842
CLEANSTART-2026-AR38431
CLEANSTART-2026-AS38473
CLEANSTART-2026-AV21509
CLEANSTART-2026-BA41349
CLEANSTART-2026-BD49035
CLEANSTART-2026-BE05060
CLEANSTART-2026-BE68531
CLEANSTART-2026-BG93699
CLEANSTART-2026-BI19096
CLEANSTART-2026-BM78291
CLEANSTART-2026-BX78383
CLEANSTART-2026-CH64198
CLEANSTART-2026-CI73950
CLEANSTART-2026-CL67452
CLEANSTART-2026-CN27900
CLEANSTART-2026-CP15003
CLEANSTART-2026-CV49545
CLEANSTART-2026-CX34942
CLEANSTART-2026-DG85765
CLEANSTART-2026-EA12165
CLEANSTART-2026-EH36582
CLEANSTART-2026-EJ83238
CLEANSTART-2026-EU52554
CLEANSTART-2026-EV55455
CLEANSTART-2026-EY79095
CLEANSTART-2026-FA38569
CLEANSTART-2026-FD47409
CLEANSTART-2026-FF85222
CLEANSTART-2026-FH24210
CLEANSTART-2026-FJ76096
CLEANSTART-2026-FR50160
CLEANSTART-2026-FU72483
CLEANSTART-2026-GB38700
CLEANSTART-2026-GM77447
CLEANSTART-2026-GM82388
CLEANSTART-2026-GQ12922
CLEANSTART-2026-GY91527
CLEANSTART-2026-HD10763
CLEANSTART-2026-HJ99696
CLEANSTART-2026-HO16255
CLEANSTART-2026-HQ88919
CLEANSTART-2026-IC09970
CLEANSTART-2026-IC13101
CLEANSTART-2026-IH16568
CLEANSTART-2026-IM39799
CLEANSTART-2026-IN26303
CLEANSTART-2026-IT06487
CLEANSTART-2026-JA94642
CLEANSTART-2026-JC31451
CLEANSTART-2026-JI51299
CLEANSTART-2026-JI93588
CLEANSTART-2026-JT15863
CLEANSTART-2026-JT42679
CLEANSTART-2026-JV11945
CLEANSTART-2026-JY65496
CLEANSTART-2026-KB08955
CLEANSTART-2026-KE34410
CLEANSTART-2026-KF61159
CLEANSTART-2026-KJ72865
CLEANSTART-2026-KJ73757
CLEANSTART-2026-KJ85611
CLEANSTART-2026-KL41807
CLEANSTART-2026-KL87201
CLEANSTART-2026-KT90792
CLEANSTART-2026-KX80654
CLEANSTART-2026-LA96053
CLEANSTART-2026-LC57158
CLEANSTART-2026-LD38774
CLEANSTART-2026-LN45890
CLEANSTART-2026-LO51673
CLEANSTART-2026-LO55919
CLEANSTART-2026-MA24172
CLEANSTART-2026-MA83809
CLEANSTART-2026-MC76610
CLEANSTART-2026-MI06133
CLEANSTART-2026-MJ39387
CLEANSTART-2026-MO16862
CLEANSTART-2026-MR08661
CLEANSTART-2026-MW09143
CLEANSTART-2026-MW42038
CLEANSTART-2026-MY68881
CLEANSTART-2026-MZ00063
CLEANSTART-2026-NE76010
CLEANSTART-2026-NT30039
CLEANSTART-2026-NU38786
CLEANSTART-2026-OF46770
CLEANSTART-2026-OH26633
CLEANSTART-2026-OM32721
CLEANSTART-2026-ON19155
CLEANSTART-2026-OV11554
CLEANSTART-2026-OV19069
CLEANSTART-2026-OV95289
CLEANSTART-2026-OY74734
CLEANSTART-2026-PD78752
CLEANSTART-2026-PF69993
CLEANSTART-2026-PH23874
CLEANSTART-2026-PH30270
CLEANSTART-2026-PI10084
CLEANSTART-2026-PX55932
CLEANSTART-2026-QB14134
CLEANSTART-2026-QN79037
CLEANSTART-2026-QN97697
CLEANSTART-2026-QT53274
CLEANSTART-2026-QV92392
CLEANSTART-2026-RE02723
CLEANSTART-2026-RF77222
CLEANSTART-2026-RF96040
CLEANSTART-2026-RJ71322
CLEANSTART-2026-RL64341
CLEANSTART-2026-RQ86436
CLEANSTART-2026-RR10818
CLEANSTART-2026-RT07393
CLEANSTART-2026-RT37134
CLEANSTART-2026-RW78583
CLEANSTART-2026-SA81922
CLEANSTART-2026-SM80424
CLEANSTART-2026-SO47947
CLEANSTART-2026-SO86245
CLEANSTART-2026-SP73148
CLEANSTART-2026-SQ76279
CLEANSTART-2026-SV92564
CLEANSTART-2026-SW10568
CLEANSTART-2026-SX09346
CLEANSTART-2026-SY48547
CLEANSTART-2026-TF97968
CLEANSTART-2026-TG12071
CLEANSTART-2026-TN63389
CLEANSTART-2026-TO13966
CLEANSTART-2026-UC73978
CLEANSTART-2026-UI27816
CLEANSTART-2026-UK19445
CLEANSTART-2026-UR38994
CLEANSTART-2026-UV44486
CLEANSTART-2026-UY68298
CLEANSTART-2026-VA62549
CLEANSTART-2026-VD09973
CLEANSTART-2026-VD47610
CLEANSTART-2026-VE68915
CLEANSTART-2026-VN16911
CLEANSTART-2026-VO11205
CLEANSTART-2026-VU72808
CLEANSTART-2026-VV82680
CLEANSTART-2026-VX15911
CLEANSTART-2026-VY69341
CLEANSTART-2026-WA48911
CLEANSTART-2026-WE55349
CLEANSTART-2026-WF25734
CLEANSTART-2026-WK17839
CLEANSTART-2026-WK82561
CLEANSTART-2026-WP03591
CLEANSTART-2026-WS85269
CLEANSTART-2026-WU14778
CLEANSTART-2026-WY21381
CLEANSTART-2026-XC13942
CLEANSTART-2026-XK25146
CLEANSTART-2026-XS03563
CLEANSTART-2026-XV47154
CLEANSTART-2026-XV65906
CLEANSTART-2026-XZ28830
CLEANSTART-2026-YB92538
CLEANSTART-2026-YG71543
CLEANSTART-2026-YK91867
CLEANSTART-2026-YY48565
CLEANSTART-2026-ZF00349
CLEANSTART-2026-ZK75486
CLEANSTART-2026-ZL51442
CLEANSTART-2026-ZX52017
CVE-2026-39821
GO-2026-5026
OPENSUSE-SU-2026:10856-1
OPENSUSE-SU-2026:10871-1
OPENSUSE-SU-2026:10872-1
OPENSUSE-SU-2026:10873-1
OPENSUSE-SU-2026:10875-1
OPENSUSE-SU-2026:10876-1
OPENSUSE-SU-2026:10877-1
OPENSUSE-SU-2026:10886-1
OPENSUSE-SU-2026:10887-1
OPENSUSE-SU-2026:10889-1
OPENSUSE-SU-2026:10899-1
OPENSUSE-SU-2026:10901-1
OPENSUSE-SU-2026:10908-1
OPENSUSE-SU-2026:10913-1
OPENSUSE-SU-2026:10921-1
OPENSUSE-SU-2026:10930-1
OPENSUSE-SU-2026:10971-1
OPENSUSE-SU-2026:10981-1
OPENSUSE-SU-2026:10997-1
OPENSUSE-SU-2026:11011-1
OPENSUSE-SU-2026:11012-1
OPENSUSE-SU-2026:11050-1
OPENSUSE-SU-2026:11053-1
OPENSUSE-SU-2026:11075-1
OPENSUSE-SU-2026:11107-1
OPENSUSE-SU-2026:11126-1
OPENSUSE-SU-2026:11144-1
OPENSUSE-SU-2026:11153-1
OPENSUSE-SU-2026:11199-1
OPENSUSE-SU-2026:11290-1
OPENSUSE-SU-2026:11305-1
OPENSUSE-SU-2026:11314-1
OPENSUSE-SU-2026:11330-1
OPENSUSE-SU-2026:11331-1
OPENSUSE-SU-2026:11340-1
OPENSUSE-SU-2026:11376-1
OPENSUSE-SU-2026:20853-1
OPENSUSE-SU-2026:20854-1
OPENSUSE-SU-2026:20888-1
OPENSUSE-SU-2026:20892-1
OPENSUSE-SU-2026:20893-1
OPENSUSE-SU-2026:20902-1
OPENSUSE-SU-2026:20940-1
OPENSUSE-SU-2026:20956-1
OPENSUSE-SU-2026:20994-1
OPENSUSE-SU-2026:21010-1
OPENSUSE-SU-2026:21013-1
OPENSUSE-SU-2026:21060-1
OPENSUSE-SU-2026:21069-1
OPENSUSE-SU-2026:21079-1
OPENSUSE-SU-2026:21084-1
OPENSUSE-SU-2026:21120-1
OPENSUSE-SU-2026:21151-1
OPENSUSE-SU-2026:21157-1
OPENSUSE-SU-2026:21205-1
OPENSUSE-SU-2026:21210-1
OPENSUSE-SU-2026:21213-1
OPENSUSE-SU-2026:21241-1
OPENSUSE-SU-2026:21247-1
OPENSUSE-SU-2026:21251-1
OPENSUSE-SU-2026:21265-1
OPENSUSE-SU-2026:21277-1
OPENSUSE-SU-2026:21379-1
OPENSUSE-SU-2026:21395-1
OPENSUSE-SU-2026:21413-1
OPENSUSE-SU-2026:21422-1
OPENSUSE-SU-2026:21432-1
OPENSUSE-SU-2026:21433-1
OPENSUSE-SU-2026:21436-1
OPENSUSE-SU-2026:21441-1
OPENSUSE-SU-2026:21454-1
OPENSUSE-SU-2026:21456-1
OPENSUSE-SU-2026:21473-1
OPENSUSE-SU-2026:21476-1
OPENSUSE-SU-2026:21480-1
OPENSUSE-SU-2026:21482-1
OPENSUSE-SU-2026:21483-1
OPENSUSE-SU-2026:21494-1
OPENSUSE-SU-2026:21499-1
OPENSUSE-SU-2026:21500-1
RHSA-2026:23262
RHSA-2026:23264
RHSA-2026:30853
RHSA-2026:30854
RHSA-2026:30855
RHSA-2026:34357
RHSA-2026:34359
RHSA-2026:34789
RHSA-2026:35826
RHSA-2026:35827
RHSA-2026:35828
RHSA-2026:35829
RHSA-2026:35830
RHSA-2026:35831
RHSA-2026:36796
RHSA-2026:37435
RHSA-2026:37436
RHSA-2026:39573
RHSA-2026:39879
RHSA-2026:41019
RHSA-2026:41930
RHSA-2026:42078
RHSA-2026:42079
RHSA-2026:42080
RHSA-2026:42082
RHSA-2026:42150
RHSA-2026:42151
RHSA-2026:42240
RHSA-2026:46395
SUSE-OU-2016:2857-1
SUSE-SU-2026:22066-1
SUSE-SU-2026:22075-1
SUSE-SU-2026:22157-1
SUSE-SU-2026:22159-1
SUSE-SU-2026:22193-1
SUSE-SU-2026:22226-1
SUSE-SU-2026:22233-1
SUSE-SU-2026:22242-1
SUSE-SU-2026:22249-1
SUSE-SU-2026:22285-1
SUSE-SU-2026:22305-1
SUSE-SU-2026:22320-1
SUSE-SU-2026:22328-1
SUSE-SU-2026:22367-1
SUSE-SU-2026:22376-1
SUSE-SU-2026:22423-1
SUSE-SU-2026:22424-1
SUSE-SU-2026:22432-1
SUSE-SU-2026:22442-1
SUSE-SU-2026:22443-1
SUSE-SU-2026:22455-1
SUSE-SU-2026:22456-1
SUSE-SU-2026:22513-1
SUSE-SU-2026:22546-1
SUSE-SU-2026:22558-1
SUSE-SU-2026:22567-1
SUSE-SU-2026:22575-1
SUSE-SU-2026:22703-1
SUSE-SU-2026:22800-1
SUSE-SU-2026:22848-1
SUSE-SU-2026:2285-1
SUSE-SU-2026:22855-1
SUSE-SU-2026:22887-1
SUSE-SU-2026:22892-1
SUSE-SU-2026:22934-1
SUSE-SU-2026:22945-1
SUSE-SU-2026:22952-1
SUSE-SU-2026:2466-1
SUSE-SU-2026:2467-1
SUSE-SU-2026:2468-1
SUSE-SU-2026:2581-1
SUSE-SU-2026:2609-1
SUSE-SU-2026:2611-1
SUSE-SU-2026:2612-1
SUSE-SU-2026:2639-1
SUSE-SU-2026:2640-1
SUSE-SU-2026:2643-1
SUSE-SU-2026:2665-1
SUSE-SU-2026:2682-1
SUSE-SU-2026:2683-1
SUSE-SU-2026:2692-1
SUSE-SU-2026:2706-1
SUSE-SU-2026:2733-1
SUSE-SU-2026:2768-1
SUSE-SU-2026:2774-1
SUSE-SU-2026:2823-1
SUSE-SU-2026:2824-1
SUSE-SU-2026:2830-1
SUSE-SU-2026:3056-1
SUSE-SU-2026:3057-1
SUSE-SU-2026:3197-1
SUSE-SU-2026:3198-1
SUSE-SU-2026:3203-1
SUSE-SU-2026:3209-1
SUSE-SU-2026:3210-1
SUSE-SU-2026:3265-1
SUSE-SU-2026:3266-1
SUSE-SU-2026:3267-1
SUSE-SU-2026:3300-1
SUSE-SU-2026:3327-1
SUSE-SU-2026:3342-1
SUSE-SU-2026:3416-1
SUSE-SU-2026:3417-1
SUSE-SU-2026:3421-1
SUSE-SU-2026:3432-1
SUSE-SU-2026:3439-1
USN-8416-1
Produtos afetados
Linuxmint
Rocky Linux
Ubuntu
Idna
Referências · 3305
- 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/39xxx/CVE-2026-39821.json⭐ 2871 🔗 622 · Exploit
- https://github.com/golang/go/issues/78760⭐ 134171 🔗 19089 · Nota
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-KJ73757.json⭐ 2 · Nota
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-UR38994.json⭐ 2 · Nota
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-EJ83238.json⭐ 2 · Nota
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-LO51673.json⭐ 2 · Nota
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-HJ99696.json⭐ 2 · Nota
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-IT06487.json⭐ 2 · Nota
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-ON19155.json⭐ 2 · Nota
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-AS38473.json⭐ 2 · Nota
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-OV11554.json⭐ 2 · Nota
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-QB14134.json⭐ 2 · Nota
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-CI73950.json⭐ 2 · Nota
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-XS03563.json⭐ 2 · Nota
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-CP15003.json⭐ 2 · Nota