1412 matches found
SUSE-SU-2025:02059-1 Security update for icu
This update for icu fixes the following issues: - CVE-2025-5222: Stack buffer overflow in the SRBRoot:addTag function bsc1243721...
Debian: Security Advisory (DLA-4217-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 4217-1] icu security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4217-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk June 15, 2025 https://wiki.debian.org/LTS -...
Debian dla-4217 : icu-devtools - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4217 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4217-1 [email protected] https://www.debian.org/lts/security/...
[SECURITY] Fedora 41 Update: mingw-icu-74.2-4.fc41
ICU is a set of C and C++ libraries that provides robust and full-featured Unicode and locale support. The library provides calendar support, conversions for many character sets, language sensitive collation, date and time formatting, support for many locales, message catalogs and resources,...
[SECURITY] Fedora 42 Update: mingw-icu-76.1-3.fc42
ICU is a set of C and C++ libraries that provides robust and full-featured Unicode and locale support. The library provides calendar support, conversions for many character sets, language sensitive collation, date and time formatting, support for many locales, message catalogs and resources,...
Fedora: Security Advisory (FEDORA-2025-879f3d7695)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-49ae47f4ef)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 41 : mingw-icu (2025-49ae47f4ef)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-49ae47f4ef advisory. Backport fix for CVE-2025-5222. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...
Fedora 42 : mingw-icu (2025-879f3d7695)
The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-879f3d7695 advisory. Backport fix for CVE-2025-5222. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...
AZL-69706 CVE-2025-5222 affecting package nodejs18 for versions less than 18.20.3-10
A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution...
AZL-66147 CVE-2025-5222 affecting package icu for versions less than 68.2.0.9-2
A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution...
CVE-2025-5222 Icu: stack buffer overflow in the srbroot::addtag function
A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution...
CVE-2025-5222
CVE-2025-5222 is a stack buffer overflow in the ICU library’s SRBRoot::addTag. Connected advisories indicate affected packages across distributions include ICU itself and dependent packages (e.g., nodejs and icu packages) with versions below patched releases (e.g., nodejs < 20.14.0-10, nodejs1...
Johnson Controls iSTAR Configuration Utility (ICU) tool
RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker to gain access to memory leaked from the ICU. This utility is only used to configure products that are no longer manufactured or supported. ICU is not used to configure the iSTAR Ultra and the current iSTAR G2...
CVE-2025-5222
A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. This issue may lead to memory corruption and local arbitrary code execution...
Alibaba Cloud Linux 3 : 0022: nodejs:14 (ALINUX3-SA-2021:0022)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0022 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-10531: An issue was discovered in...
CISA Releases Seven Industrial Control Systems Advisories
CISA released seven Industrial Control Systems ICS advisories on April 24, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-114-01 Schneider Electric Modicon Controllers ICSA-25-114-02 ALBEDO Telecom Net.Time -...
Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool
RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for all control...