The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) before 55.1 does not properly track directionally isolated pieces of text, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via crafted text.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Ios | — | Upgrade to the latest version of Apple iOS | Apr 18, 2016 | May 25, 2015 |
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Sep 17, 2015 | May 25, 2015 |
| Apple Osx Icu | — | Upgrade macOS to the latest version | Apr 5, 2017 | May 25, 2015 |
| Debian | — | Upgrade icu | Jul 30, 2024 | May 25, 2015 |
| Gentoo Linux | — | Upgrade dev-libs/icu. | Oct 30, 2017 | May 25, 2015 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.3.0.0.30.0 on Solaris 11.3Upgrade consolidation/l10n/l10n-incorporation to version 0.5.11-0.175.3.0.0.26.2 on Solaris 11.3 | May 29, 2017 | May 25, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 5, 2015 |
| Suse | — | Upgrade myspell-es_CUUpgrade apache-commons-loggingUpgrade libreoffice-icon-theme-galaxyUpgrade libmwaw-develUpgrade myspell-ca_ESUpgrade myspell-es_PEUpgrade libreoffice-l10n-viUpgrade myspell-sk_SKUpgrade myspell-ar_EGUpgrade libreoffice-l10n-boUpgrade myspell-es_HNUpgrade myspell-arUpgrade libicu52_1-32bitUpgrade myspell-en_CAUpgrade myspell-fr_LUUpgrade myspell-ar_TNUpgrade libcmis-c-0_5-5Upgrade libreoffice-l10n-srUpgrade libreoffice-l10n-bgUpgrade libreoffice-librelogoUpgrade libreoffice-l10n-koUpgrade libreoffice-l10n-cyUpgrade libreoffice-l10n-vecUpgrade myspell-ar_OMUpgrade myspell-en_NAUpgrade libreoffice-l10n-paUpgrade myspell-en_GHUpgrade libreoffice-l10n-mrUpgrade libreoffice-l10n-siUpgrade myspell-en_NZUpgrade libreoffice-l10n-dzUpgrade libodfgen-devel-docUpgrade liborcus-develUpgrade libetonyek-develUpgrade libreofficekitUpgrade libreoffice-l10n-stUpgrade libmwaw-0_3-3Upgrade libreoffice-l10n-satUpgrade libreoffice-filters-optionalUpgrade libreoffice-baseUpgrade libreoffice-l10n-bn_inUpgrade libreoffice-l10n-itUpgrade myspell-te_INUpgrade libreoffice-l10n-teUpgrade myspell-ar_LBUpgrade icuUpgrade libreoffice-l10n-furUpgrade myspell-bs_BAUpgrade myspell-nb_NOUpgrade malaga-suomiUpgrade libreoffice-l10n-maiUpgrade myspell-cs_CZUpgrade libreoffice-l10n-nrUpgrade libreoffice-impressUpgrade libreoffice-l10n-nsoUpgrade myspell-en_USUpgrade myspell-es_ESUpgrade libreoffice-l10n-tsUpgrade libreoffice-l10n-trUpgrade myspell-es_CRUpgrade libabw-devel-docUpgrade myspell-ar_LYUpgrade libreoffice-l10n-faUpgrade myspell-lightproof-pt_BRUpgrade libreoffice-l10n-sdUpgrade librevenge-develUpgrade libabw-0_1-1Upgrade libreoffice-share-linkerUpgrade libreoffice-mathUpgrade libreoffice-l10n-zuUpgrade libe-book-devel-docUpgrade libreoffice-l10n-esUpgrade libicu52_1-dataUpgrade libreoffice-l10n-gdUpgrade myspell-bg_BGUpgrade libreoffice-l10n-omUpgrade libreoffice-l10n-ocUpgrade libmspub-0_1-1Upgrade myspell-de_ATUpgrade libreoffice-l10n-astUpgrade myspell-af_ZAUpgrade libreoffice-l10n-svUpgrade libreoffice-l10n-zh_cnUpgrade libreoffice-l10n-kabUpgrade libreoffice-mailmergeUpgrade myspell-es_PYUpgrade libgraphite2-3-32bitUpgrade myspell-nl_BEUpgrade libreoffice-l10n-daUpgrade myspell-en_MWUpgrade libreoffice-l10n-eoUpgrade myspell-es_UYUpgrade libreoffice-writerUpgrade libreoffice-pyunoUpgrade myspell-caUpgrade myspell-en_GBUpgrade myspell-hr_HRUpgrade python-importlibUpgrade myspell-lo_LAUpgrade myspell-sv_SEUpgrade libreoffice-l10n-szlUpgrade libfontsUpgrade libreoffice-l10n-huUpgrade libreoffice-l10n-tgUpgrade libreoffice-l10n-bsUpgrade libreoffice-l10n-veUpgrade libreoffice-l10n-bnUpgrade libreoffice-l10n-mkUpgrade libreoffice-l10n-frUpgrade liblangtag-develUpgrade libreoffice-l10n-taUpgrade libodfgen-develUpgrade libreoffice-l10n-hrUpgrade libreoffice-l10n-lbUpgrade libodfgen-0_1-1Upgrade myspell-srUpgrade libvisio-0_1-1Upgrade myspell-et_EEUpgrade liblayoutUpgrade libreoffice-l10n-kaUpgrade myspell-hi_INUpgrade libcdr-develUpgrade libreoffice-l10n-hiUpgrade myspell-af_NAUpgrade libreoffice-l10n-zh-HantUpgrade myspell-el_GRUpgrade libloaderUpgrade myspell-ro_ROUpgrade libixion-develUpgrade libreoffice-gladeUpgrade myspell-es_CLUpgrade graphite2-develUpgrade libmwaw-devel-docUpgrade libreoffice-l10n-fiUpgrade libvisio-devel-docUpgrade myspell-en_PHUpgrade myspell-en_AUUpgrade myspell-pt_AOUpgrade myspell-fr_CAUpgrade libabw-develUpgrade libpagemaker-0_0-0Upgrade libreoffice-l10n-afUpgrade libreoffice-l10n-ssUpgrade libreoffice-l10n-zh-HansUpgrade libreoffice-l10n-ukUpgrade libreoffice-l10n-pt-BRUpgrade libreoffice-l10n-etUpgrade libreoffice-l10n-lvUpgrade libwps-0_4-4Upgrade libreoffice-icon-theme-tangoUpgrade myspell-lightproof-ru_RUUpgrade myspell-ar_BHUpgrade libreoffice-l10n-beUpgrade libreofficekit-develUpgrade myspell-zu_ZAUpgrade libreoffice-sdkUpgrade libreoffice-l10n-sw_tzUpgrade libreoffice-l10n-ttUpgrade libreoffice-l10n-amUpgrade libreoffice-gnomeUpgrade libreoffice-l10n-sidUpgrade libreoffice-l10n-fyUpgrade libreoffice-gtk3Upgrade myspell-en_ZWUpgrade myspell-de_DEUpgrade libreoffice-l10n-uzUpgrade libcmis-develUpgrade libvoikko1Upgrade libreoffice-l10n-jaUpgrade libreoffice-l10n-ca_valenciaUpgrade libformulaUpgrade myspell-dictionariesUpgrade myspell-be_BYUpgrade libreoffice-l10n-knUpgrade myspell-pt_BRUpgrade myspell-viUpgrade librepositoryUpgrade libmythes-1_2-0Upgrade libreoffice-l10n-nbUpgrade myspell-bsUpgrade liborcus-0_8-0Upgrade myspell-he_ILUpgrade libcdr-0_1-1Upgrade libreoffice-l10n-enUpgrade libreoffice-l10n-dsbUpgrade libixion-0_10-0Upgrade myspell-nl_NLUpgrade libreoffice-l10n-loUpgrade libreoffice-l10n-mnUpgrade myspell-gu_INUpgrade libreoffice-l10n-skUpgrade libreoffice-l10n-pt_brUpgrade myspell-ar_AEUpgrade myspell-es_NIUpgrade libreoffice-l10n-brxUpgrade libfreehand-develUpgrade myspell-ar_JOUpgrade myspell-lightproof-enUpgrade liblangtag1Upgrade libreoffice-l10n-euUpgrade myspell-es_MXUpgrade libetonyek-devel-docUpgrade libe-book-0_1-1Upgrade myspell-ru_RUUpgrade myspell-fr_BEUpgrade libreoffice-l10n-guUpgrade libreoffice-voikkoUpgrade libreoffice-l10n-hsbUpgrade myspell-ar_QAUpgrade myspell-fr_MCUpgrade libreoffice-l10n-gugUpgrade myspell-es_ARUpgrade myspell-es_VEUpgrade myspell-esUpgrade myspell-da_DKUpgrade mythes-develUpgrade libreoffice-l10n-nlUpgrade libreoffice-l10n-elUpgrade libcmis-c-develUpgrade libfreehand-0_1-1Upgrade libgraphite2-3Upgrade myspell-en_BZUpgrade libreoffice-l10n-arUpgrade libreoffice-l10n-myUpgrade myspell-noUpgrade libreoffice-l10n-xhUpgrade libreoffice-l10n-thUpgrade myspell-ar_SYUpgrade myspell-ca_ITUpgrade libreoffice-l10n-tnUpgrade myspell-ar_SAUpgrade libreoffice-l10n-neUpgrade libreoffice-l10n-deUpgrade libreoffice-l10n-plUpgrade libreoffice-l10n-isUpgrade myspell-en_JMUpgrade libreoffice-l10n-kkUpgrade libreofficeUpgrade libreoffice-l10n-kmUpgrade libetonyek-0_1-1Upgrade myspell-es_SVUpgrade libreoffice-kde4Upgrade myspell-ca_ADUpgrade myspell-ca_ES_valenciaUpgrade libreoffice-calc-extensionsUpgrade myspell-es_PAUpgrade myspell-ar_SDUpgrade myspell-sr_Latn_RSUpgrade myspell-fr_FRUpgrade libbaseUpgrade libmspub-devel-docUpgrade myspell-es_BOUpgrade libreoffice-branding-upstreamUpgrade myspell-es_PRUpgrade libreoffice-l10n-glUpgrade libreoffice-drawUpgrade libreoffice-l10n-sqUpgrade myspell-bn_INUpgrade libreoffice-gtk2Upgrade myspell-pl_PLUpgrade myspell-hu_HUUpgrade myspell-th_THUpgrade libreoffice-l10n-gaUpgrade libreoffice-gdb-pretty-printersUpgrade myspell-lt_LTUpgrade libwps-develUpgrade myspell-en_TTUpgrade libreoffice-l10n-ugUpgrade myspell-ca_FRUpgrade myspell-en_ZAUpgrade libreoffice-l10n-caUpgrade libreoffice-l10n-csUpgrade libreoffice-l10n-mlUpgrade libreoffice-l10n-pt-PTUpgrade myspell-es_GTUpgrade libicu52_1Upgrade myspell-it_ITUpgrade myspell-es_DOUpgrade libvisio-develUpgrade libreoffice-l10n-brUpgrade myspell-ar_YEUpgrade myspell-ar_IQUpgrade libreoffice-l10n-orUpgrade libreoffice-l10n-ckbUpgrade libreoffice-l10n-en_gbUpgrade libreoffice-l10n-slUpgrade libreoffice-l10n-kmr_latnUpgrade libreoffice-l10n-kokUpgrade libreoffice-l10n-ltUpgrade myspell-en_IEUpgrade libreoffice-l10n-dgoUpgrade libreoffice-l10n-heUpgrade myspell-sr_CSUpgrade google-carlito-fontsUpgrade myspell-vi_VNUpgrade myspell-de_CHUpgrade myspell-roUpgrade myspell-lv_LVUpgrade myspell-lightproof-hu_HUUpgrade myspell-sr_RSUpgrade myspell-teUpgrade myspell-ar_DZUpgrade libreoffice-base-drivers-postgresqlUpgrade libreoffice-l10n-mniUpgrade myspell-pt_PTUpgrade libe-book-develUpgrade libreoffice-icon-themesUpgrade libreoffice-l10n-ruUpgrade libvoikko-develUpgrade libreoffice-l10n-asUpgrade libreoffice-l10n-ksUpgrade myspell-en_INUpgrade myspell-es_ECUpgrade libfreehand-devel-docUpgrade libreoffice-l10n-roUpgrade myspell-en_BSUpgrade myspell-ar_KWUpgrade myspell-enUpgrade libcmis-0_5-5Upgrade libreoffice-l10n-zh_twUpgrade fluteUpgrade libreoffice-l10n-nnUpgrade libreoffice-sdk-docUpgrade myspell-sl_SIUpgrade pentaho-libxmlUpgrade sacUpgrade myspell-sv_FIUpgrade libcdr-devel-docUpgrade myspell-es_COUpgrade libserializerUpgrade libreoffice-writer-extensionsUpgrade libreoffice-officebeanUpgrade libreoffice-base-drivers-mysqlUpgrade pentaho-reporting-flow-engineUpgrade librevenge-0_0-0Upgrade libmspub-develUpgrade libreoffice-l10n-pt_ptUpgrade libreoffice-l10n-en_zaUpgrade libgltf-0_0-0Upgrade myspell-sr_Latn_CSUpgrade libreoffice-l10n-idUpgrade libhyphen0Upgrade myspell-deUpgrade libreoffice-qt5Upgrade libreoffice-l10n-rwUpgrade myspell-ar_MAUpgrade myspell-bn_BDUpgrade librevenge-stream-0_0-0Upgrade libicu-docUpgrade myspell-nn_NOUpgrade myspell-fr_CHUpgrade libreoffice-l10n-sa_inUpgrade libicu-develUpgrade libreoffice-calcUpgrade hyphen-develUpgrade librevenge-generators-0_0-0 | Dec 18, 2015 | May 25, 2015 |
| Ubuntu | — | Upgrade libicu52 | Nov 8, 2024 | May 25, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub