A vulnerability has been reported in neon, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an out of bounds read within the "ne_uri_parse()" function when parsing URIs with non-ASCII characters. This can be exploited to cause a DoS by tricking an application using the library to parse specially crafted URIs.

Note: The vulnerability may be specific for 64bit architectures.

Solution
Use trusted servers only.

Provided and/or discovered by
Reported in a Debian bug by Modestas Vainius.

Original Advisory
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=404723

Deep Links
Links available to Secunia VIM customers