Описание
International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.
Ссылки
- PatchThird Party Advisory
- Mailing ListThird Party Advisory
- ExploitVendor Advisory
- Third Party Advisory
- PatchThird Party Advisory
- Mailing ListThird Party Advisory
- ExploitVendor Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 66.1 (исключая)
cpe:2.3:a:unicode:international_components_for_unicode:*:*:*:*:*:*:*:*
Конфигурация 2
Одно из
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
EPSS
Процентиль: 28%
0.001
Низкий
5.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-416
Связанные уязвимости
CVSS3: 5.5
ubuntu
больше 4 лет назад
International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.
CVSS3: 5.5
redhat
больше 4 лет назад
International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.
CVSS3: 5.5
debian
больше 4 лет назад
International Components for Unicode (ICU-20850) v66.1 was discovered ...
EPSS
Процентиль: 28%
0.001
Низкий
5.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-416