Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-14952

Опубликовано: 09 авг. 2017
Источник: redhat
CVSS3: 4.5
EPSS Низкий

Описание

Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary code via a crafted string, aka a "redundant UVector entry clean up function call" issue.

Отчет

Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5icuNot affected
Red Hat Enterprise Linux 6icuWill not fix
Red Hat Enterprise Linux 7icuWill not fix

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-416
https://bugzilla.redhat.com/show_bug.cgi?id=1510930icu: Double free in i18n/zonemeta.cpp

EPSS

Процентиль: 86%
0.02941
Низкий

4.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 8 лет назад

Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary code via a crafted string, aka a "redundant UVector entry clean up function call" issue.

CVSS3: 9.8
nvd
больше 8 лет назад

Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary code via a crafted string, aka a "redundant UVector entry clean up function call" issue.

CVSS3: 9.8
debian
больше 8 лет назад

Double free in i18n/zonemeta.cpp in International Components for Unico ...

CVSS3: 9.8
github
больше 3 лет назад

Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary code via a crafted string, aka a "redundant UVector entry clean up function call" issue.

CVSS3: 7.3
fstec
больше 8 лет назад

Уязвимость библиотеки International Components for Unicode (i18n/zonemeta.cpp) для C/C++, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 86%
0.02941
Низкий

4.5 Medium

CVSS3