International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade icu | Jul 30, 2024 | Nov 4, 2018 |
| Oracle Solaris | — | Upgrade library/accessibility/brltty to version 5.4-11.4.10.0.1.2.0 on Solaris 11.4Upgrade web/php-73 to version 7.3.2-11.4.10.0.1.2.0 on Solaris 11.4Upgrade service/network/smtp/postfix to version 3.2.2-11.4.10.0.1.2.0 on Solaris 11.4Upgrade developer/icu to version 11.4-11.4.10.0.1.2.0 on Solaris 11.4Upgrade runtime/nodejs to version 8.15.1-11.4.10.0.1.2.0 on Solaris 11.4Upgrade web/browser/firefox to version 60.7.0-11.4.10.0.1.2.0 on Solaris 11.4Upgrade text/gnu-gettext to version 0.19.8-11.4.10.0.1.2.0 on Solaris 11.4Upgrade library/desktop/webkitgtk4 to version 2.22.6-11.4.10.0.1.2.0 on Solaris 11.4Upgrade web/php-71 to version 7.1.25-11.4.10.0.1.2.0 on Solaris 11.4Upgrade library/desktop/search/tracker to version 1.12.0-11.4.10.0.1.2.0 on Solaris 11.4Upgrade library/icu to version 11.4-11.4.10.0.1.2.0 on Solaris 11.4Upgrade library/desktop/evolution-data-server to version 3.24.0-11.4.10.0.1.2.0 on Solaris 11.4Upgrade library/desktop/harfbuzz to version 2.3.1-11.4.10.0.1.2.0 on Solaris 11.4Upgrade mail/thunderbird to version 60.7.0-11.4.10.0.1.2.0 on Solaris 11.4Upgrade runtime/nodejs/nodejs-8 to version 8.15.1-11.4.10.0.1.2.0 on Solaris 11.4 | Jun 26, 2019 | Nov 4, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub