Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long locale string.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade icu | Aug 30, 2017 | Sep 17, 2016 |
| Debian | — | Upgrade icu | Nov 27, 2016 | Sep 17, 2016 |
| Gentoo Linux | — | Upgrade dev-libs/icu. | Oct 30, 2017 | Sep 17, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libicu-develUpgrade libicu | Dec 4, 2019 | Sep 17, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libicu-develUpgrade libicu | Dec 18, 2019 | Sep 17, 2016 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libicuUpgrade libicu-devel | Sep 24, 2019 | Sep 17, 2016 |
| Oracle Solaris | — | Upgrade developer/icu to version 0.5.11-0.175.3.14.0.4.4 on Solaris 11.3Upgrade library/icu to version 0.5.11-0.175.3.14.0.4.4 on Solaris 11.3 | May 29, 2017 | Sep 17, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 3, 2016 |
| Ubuntu | — | Upgrade libicu55Upgrade libicu48Upgrade libicu57Upgrade libicu52 | Mar 14, 2017 | Sep 17, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 17, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub