boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade libboost_thread1_49_0-32bitUpgrade boost-doc-manUpgrade libboost_python1_49_0-32bitUpgrade libboost_thread1_49_0Upgrade libboost_program_options1_49_0Upgrade libboost_iostreams1_49_0Upgrade libboost_date_time1_49_0Upgrade libboost_filesystem1_49_0Upgrade libboost_graph1_49_0Upgrade libboost_filesystem1_49_0-32bitUpgrade libboost_wave1_49_0Upgrade libboost_mpi1_49_0-32bitUpgrade libboost_test1_49_0-32bitUpgrade libboost_test1_49_0Upgrade libboost_regex1_49_0-32bitUpgrade libboost_serialization1_49_0-32bitUpgrade libboost_math1_49_0-32bitUpgrade libboost_timer1_49_0Upgrade boost-develUpgrade libboost_math1_49_0Upgrade libboost_system1_49_0-32bitUpgrade libboost_regex1_49_0Upgrade libboost_serialization1_49_0Upgrade libboost_chrono1_49_0Upgrade libboost_program_options1_49_0-32bitUpgrade libboost_signals1_49_0-32bitUpgrade libboost_date_time1_49_0-32bitUpgrade boost-doc-htmlUpgrade libboost_signals1_49_0Upgrade libboost_wave1_49_0-32bitUpgrade libboost_random1_49_0Upgrade libboost_system1_49_0Upgrade libboost_mpi1_49_0Upgrade boost-license1_49_0Upgrade boostUpgrade libboost_graph1_49_0-32bitUpgrade libboost_random1_49_0-32bitUpgrade boost-devel-32bitUpgrade libboost_locale1_49_0Upgrade boost-doc-pdfUpgrade libboost_iostreams1_49_0-32bitUpgrade libboost_python1_49_0 | Dec 12, 2013 | Mar 12, 2013 |
| Ubuntu | — | Upgrade libboost-locale1.49.0 | Nov 8, 2024 | Mar 12, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub