BIT-NODE-2023-23920

An untrusted search path vulnerability exists in Node.js. 19.6.1, 18.14.1, 16.19.1, and 14.21.3 that could allow an attacker to search and potentially load ICU data when running with elevated privileges...

openSUSE: Security Advisory for nodejs18 (SUSE-SU-2023:0419-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for libqt5 (SUSE-SU-2023:4951-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 : Optional update for icu (SUSE-SU-SUSE-OU-2024:0647-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-SUSE-OU-2024:0647-1 advisory. - An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a...

SUSE-OU-2024:0647-1 Optional update for icu

This update for icu fixes the following issue: - No source changes, this just synchronizes the changelog with the latest implemented changes and correspondent ids...

icu:date_time_pattern_generator_fuzzer: Stack-buffer-overflow in icu_75::StringPiece::StringPiece

Project: https://github.com/unicode-org/icu.git Detailed Report: https://oss-fuzz.com/testcase?key=5596466030641152 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: datetimepatterngeneratorfuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: Stack-buffer-overflow READ 10 Crash...

icu:plurrule_fuzzer: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5105079052992512 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: plurrulefuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Crash...

icu:plurrule_fuzzer: Stack-buffer-overflow in icu_75::PluralRuleParser::parse

Project: https://github.com/unicode-org/icu.git Detailed Report: https://oss-fuzz.com/testcase?key=4543351403642880 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: plurrulefuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address:...

icu:date_format_fuzzer: Stack-buffer-overflow in _canonicalize

Project: https://github.com/unicode-org/icu.git Detailed Report: https://oss-fuzz.com/testcase?key=5173052832808960 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: dateformatfuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7ffe8e5824...

PT-2024-41539

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65534 Crash type: Heap-buffer-overflow READ 1 Crash state: icu 75::Locale::Locale plurrule fuzzer.cpp...

PT-2024-40707 · Icu · Icu

Name of the Vulnerable Software and Affected Versions: icu 75 affected versions not specified Description: The issue is related to a stack-buffer-overflow crash in the icu 75 library, specifically in the TZDBTimeZoneNames class. The crash occurs when calling the getMetaZoneNames and...

icu:time_zone_names_fuzzer: Stack-buffer-overflow in icu_75::TZDBTimeZoneNames::getMetaZoneNames

Project: https://github.com/unicode-org/icu.git Detailed Report: https://oss-fuzz.com/testcase?key=5071816267726848 Project: icu Fuzzing Engine: afl Fuzz Target: timezonenamesfuzzer Job Type: aflasanicu Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7ffd791fa1c1 Cra...

SUSE-SU-2023:4951-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: - CVE-2023-37369: Fixed buffer overflow in QXmlStreamReader bsc1214327. - libq5-qtbase was rebuild against icu 73. jscPED-6193...

SUSE-SU-2023:4950-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: - CVE-2023-37369: Fixed buffer overflow in QXmlStreamReader bsc1214327. - libq5-qtbase was rebuild against icu 73. jscPED-6193...

PT-2023-35657

Name of the Vulnerable Software and Affected Versions icu versions affected versions not specified Description The issue is related to a stack-buffer-overflow crash in the icu 75 library, specifically in the TZDBTimeZoneNames class. The crash occurs when calling the getMetaZoneNames and...

icu:time_zone_names_fuzzer: Stack-buffer-overflow in icu_75::TZDBTimeZoneNames::getMetaZoneNames

Detailed Report: https://oss-fuzz.com/testcase?key=6453645256032256 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: timezonenamesfuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7ffd0bb59201 Crash State:...

SUSE-SU-2023:4868-1 Security update for tracker-miners

This update for tracker-miners fixes the following issues: - CVE-2023-5557: Fixed a sandbox escape by adding seccomp rules and applying it to the whole process bsc1216199 - rebuild against current ICU 73...

Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in ICU

Summary IBM Flex System Chassis Management Module CMM has addressed the following vulnerabilities in ICU. Vulnerability Details CVEID: CVE-2017-7868 DESCRIPTION: International Components for Unicode ICU is vulnerable to a heap-based buffer overflow, caused by a flaw in the utf8TextAccess function...

Rocky Linux 8 : icu (RLSA-2020:0902)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2020:0902 advisory. - An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exist...

Rocky Linux 8 : nodejs:12 (RLSA-2020:1293)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2020:1293 advisory. - An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exist...