Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-21913

Опубликовано: 20 сент. 2021
Источник: redhat
CVSS3: 5.5

Описание

International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.

A use after free flaw was discovered in the International Components for Unicode (icu) file tools package pkgdata. The highest threat from this vulnerability is to system availability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat build of OpenJDK 11com.ibm.icuNot affected
Red Hat Enterprise Linux 6icuNot affected
Red Hat Enterprise Linux 6icu4jNot affected
Red Hat Enterprise Linux 6java-1.6.0-openjdkNot affected
Red Hat Enterprise Linux 6java-1.7.0-openjdkNot affected
Red Hat Enterprise Linux 6java-1.8.0-openjdkNot affected
Red Hat Enterprise Linux 7icuNot affected
Red Hat Enterprise Linux 7java-1.6.0-openjdkNot affected
Red Hat Enterprise Linux 7java-1.7.0-openjdkNot affected
Red Hat Enterprise Linux 7java-1.8.0-openjdkNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-416
https://bugzilla.redhat.com/show_bug.cgi?id=2006950icu: Use after free in pkg_createWithAssemblyCode function in tools/pkgdata/pkgdata.cpp

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 5 лет назад

International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.

CVSS3: 5.5
nvd
почти 5 лет назад

International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.

CVSS3: 5.5
debian
почти 5 лет назад

International Components for Unicode (ICU-20850) v66.1 was discovered ...

suse-cvrf
почти 4 года назад

Security update for icu

suse-cvrf
почти 4 года назад

Security update for icu

5.5 Medium

CVSS3