An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packagingUpgrade libicuUpgrade libicu-docUpgrade libicu-develUpgrade icuUpgrade nodejs-nodemon | May 4, 2022 | Mar 12, 2020 |
| Alpine Linux | — | Upgrade icu | May 8, 2020 | Mar 12, 2020 |
| Amazon Linux Ami 2 | — | Upgrade libicu-docUpgrade icu-debuginfoUpgrade libicu-develUpgrade icuUpgrade libicu | May 8, 2020 | Mar 12, 2020 |
| Amazon_linux | — | Upgrade icu | Apr 24, 2020 | Mar 12, 2020 |
| Centos_linux | — | Upgrade nodejsUpgrade chromium-browser-debuginfoUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade libicuUpgrade icu-debuginfoUpgrade nodejs-devel-debuginfoUpgrade chromium-browserUpgrade nodejs-debugsourceUpgrade nodejs-nodemonUpgrade icu-debugsourceUpgrade nodejs-debuginfoUpgrade npmUpgrade libicu-devel-debuginfoUpgrade nodejs-develUpgrade libicu-docUpgrade libicu-develUpgrade libicu-debuginfoUpgrade icu | Mar 18, 2020 | Mar 12, 2020 |
| Debian | — | Upgrade icu | Mar 23, 2020 | Mar 12, 2020 |
| Freebsd | — | Upgrade node12Upgrade node10Upgrade node | Jun 13, 2020 | Jun 12, 2020 |
| Gentoo Linux | — | Upgrade dev-libs/icu. | Mar 16, 2020 | Mar 12, 2020 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Apr 1, 2020 | Mar 12, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libicuUpgrade libicu-devel | Apr 30, 2021 | Mar 12, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libicu-develUpgrade libicu | Jun 3, 2020 | Mar 12, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libicuUpgrade icuUpgrade libicu-develUpgrade libicu-doc | Apr 21, 2020 | Mar 12, 2020 |
| Oracle Solaris | — | Upgrade library/icu to version 11.4-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/nodejs to version 12.18.3-11.4.26.0.1.75.3 on Solaris 11.4Upgrade runtime/nodejs/nodejs-12 to version 12.18.3-11.4.26.0.1.75.3 on Solaris 11.4Upgrade runtime/nodejs/nodejs-10 to version 10.22.0-11.4.26.0.1.75.3 on Solaris 11.4Upgrade developer/icu to version 11.4-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Mar 12, 2020 |
| Oracle_linux | — | Upgrade nodejs-develUpgrade libicu-develUpgrade libicu-docUpgrade nodejs-docsUpgrade nodejs-nodemonUpgrade nodejsUpgrade npmUpgrade icuUpgrade libicuUpgrade nodejs-packaging | Mar 19, 2020 | Feb 25, 2020 |
| Redhat_linux | — | No solution existsUpgrade nodejs-debugsourceUpgrade nodejs-nodemonUpgrade icu-debugsourceUpgrade libicuUpgrade nodejs-docsUpgrade npmUpgrade icuUpgrade nodejs-debuginfoUpgrade libicu-debuginfoUpgrade icu-debuginfoUpgrade libicu-devel-debuginfoUpgrade libicu-develUpgrade libicu-docUpgrade nodejsUpgrade nodejs-devel-debuginfoUpgrade nodejs-packagingUpgrade nodejs-devel | Mar 18, 2020 | Mar 12, 2020 |
| Rocky_linux | — | Upgrade libicu-develUpgrade icuUpgrade libicu-debuginfoUpgrade libicuUpgrade icu-debugsourceUpgrade icu-debuginfoUpgrade libicu-devel-debuginfo | Mar 12, 2024 | Mar 12, 2020 |
| Suse | — | Upgrade libicu60_2-ledataUpgrade libicu60_2-bedataUpgrade nodejs10-develUpgrade npm10Upgrade libicu52_1-dataUpgrade libicu-develUpgrade nodejs10-docsUpgrade libicu60_2Upgrade libicu-devel-32bitUpgrade libicu52_1Upgrade icuUpgrade nodejs10Upgrade libicu-docUpgrade libicu52_1-32bitUpgrade libicu60_2-32bit | Apr 2, 2020 | Mar 12, 2020 |
| Ubuntu | — | Upgrade libicu55Upgrade libicu60Upgrade libicu48Upgrade libicu52 (Ubuntu Pro)Upgrade libicu63 | Mar 18, 2020 | Mar 12, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub