CVE-2016-6293

🗓️ 25 Jul 2016 14:00:00Reported by Debian Security Bug TrackerType

debiancve🔗 security-tracker.debian.org👁 29 Views

The uloc_acceptLanguageFromHTTP function in ICU through 57.1 for C/C++ allows remote attackers to cause denial of service or unspecified impact via long httpAcceptLanguage argument

Reporter	Title	Published	Views	Family All 87
IBM Security Bulletins	Security Bulletins for IBM Tealeaf Customer Experience offerings	16 Jun 201819:35	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in ICU4C affects IBM Tealeaf Customer Experience (CVE-2016-6293)	16 Jun 201820:06	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSource ICU4C Vulnernabilities in IBM eDiscovery Manager	17 Jun 201812:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security issues in IBM Tealeaf Customer Experience on Cloud Network Capture Add-On	16 Jun 201820:06	–	ibm
IBM Security Bulletins	Security Bulletin:OpenSource ICU4C Vulnernabilties in IBM eDiscovery Analyzer	17 Jun 201812:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® is affected by multiple vulnerabilities in ICU libraries.	20 Jan 202616:34	–	ibm
Tenable Nessus	PHP 5.5.x < 5.5.38 / 5.6.x < 5.6.24 / 7.0.x < 7.0.9 Multiple Vulnerabilities	5 Aug 201600:00	–	nessus
Tenable Nessus	Debian DLA-615-1 : icu security update	9 Sep 201600:00	–	nessus
Tenable Nessus	Debian DSA-3725-1 : icu - security update	28 Nov 201600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : icu (EulerOS-SA-2019-1969)	23 Sep 201900:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	all	icu	57.1-4	icu_57.1-4_all.deb
Debian	12	all	icu	57.1-4	icu_57.1-4_all.deb
Debian	13	all	icu	57.1-4	icu_57.1-4_all.deb
Debian	14	all	icu	57.1-4	icu_57.1-4_all.deb
Debian	999	all	icu	57.1-4	icu_57.1-4_all.deb

25 Jul 2016 14:00Current

10High risk

Vulners AI Score10

CVSS 27.5

CVSS 39.8

EPSS0.04957