[SECURITY] [DSA 3323-1] icu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3323-1 [email protected] https://www.debian.org/security/ Laszlo Boszormenyi August 01, 2015 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3323-1 (icu - security update)

Several vulnerabilities were discovered in the International Components for Unicode ICU library. CVE-2014-8146 The Unicode Bidirectional Algorithm implementation does not properly track directionally isolated pieces of text, which allows remote attackers to cause a denial of service heap-based...

SOL16835 - ICU overflow vulnerabilities CVE-2014-8146 and CVE-2014-8147

Note: As of February 17, 2015, AskF5 Security Advisory articles include the Severity value. Security Advisory articles published before this date do not list a Severity value. Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can...

CVE-2014-8147

The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode ICU before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause a denial of service...

BELL-CVE-2014-8147 CVE-2014-8147 does not affect BellSoft software

Bulletin has no description...

CVE-2014-8147

CVE-2014-8147 concerns ICU4C’s Unicode Bidirectional Algorithm. The vulnerability resides in resolveImplicitLevels (common/ubidi.c) where an integer data type is inconsistent with the header, enabling remote attackers to cause a denial of service via an incorrect malloc followed by an invalid fre...

CVE-2014-8147

The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode ICU before 55.1 uses an integer data type that is inconsistent with a header file, which allows remote attackers to cause a denial of service...

CVE-2015-8147

The CVE-2014-8147 vulnerability (also reflected as CVE-2015-8147 in the duplicate entry) affects ICU4C: the resolveImplicitLevels function in common/ubidi.c uses an integer type that is inconsistent with a header file, enabling remote attackers to trigger a denial of service (malloc/free mismatch...