1412 matches found
icu: Heap-buffer-overflow in utf8TextAccess
Project: https://github.com/unicode-org/icu.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6284234629054464 Project: icu Fuzzer: ucasemapfuzzer Job Type: libfuzzerasanicu Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x615000000760 Crash State: utf8TextAccess...
[SECURITY] [DSA 3725-1] icu security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3725-1 [email protected] https://www.debian.org/security/ Luciano Bello November 27, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3725-1] icu security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3725-1 [email protected] https://www.debian.org/security/ Luciano Bello November 27, 2016 https://www.debian.org/security/faq -...
Updated icu packages fix security vulnerability
Stack overflow in uresgetByKeyWithFallback in ICU before 54.1 could lead to a crash CVE-2014-9911. It was found that a big locale string causes a stack based overflow inside libicu in locid.cpp CVE-2016-7415...
MGASA-2016-0404 Updated icu packages fix security vulnerability
Stack overflow in uresgetByKeyWithFallback in ICU before 54.1 could lead to a crash CVE-2014-9911. It was found that a big locale string causes a stack based overflow inside libicu in locid.cpp CVE-2016-7415...
DSA-3725-1 icu - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3725-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-9911
Stack-based buffer overflow in the uresgetByKeyWithFallback function in common/uresbund.cpp in International Components for Unicode ICU before 54.1 for C/C++ allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted ulocgetDisplayName call...
Fedora 24 : icu (2016-a0dc2c43d0)
Security fix for CVE-2016-7415 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...
[SECURITY] Fedora 24 Update: icu-56.1-7.fc24
Tools and utilities for developing with icu...
[SECURITY] Fedora 25 Update: icu-57.1-4.fc25
Tools and utilities for developing with icu...
Fedora 25 : icu (2016-81613d042d)
Security fix for CVE-2016-6293 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...
[SECURITY] Fedora 25 Update: icu-57.1-2.fc25
Tools and utilities for developing with icu...
php: improper nul termination leading to out-of-bounds read in get_icu_value_internal
The geticuvalueinternal function in ext/intl/locale/localemethods.c in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7 does not ensure the presence of a '\0' character, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other...
php: Out-of-bounds access in locale_accept_from_http
The localeacceptfromhttp function in ext/intl/locale/localemethods.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not properly restrict calls to the ICU ulocacceptLanguageFromHTTP function, which allows remote attackers to cause a denial of service out-of-bounds read or...
Fedora 24 : icu (2016-a2b9adcd5c)
Security fix for CVE-2016-6293 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...
[SECURITY] Fedora 24 Update: icu-56.1-5.fc24
Tools and utilities for developing with icu...
Amazon Linux AMI : php70 (ALAS-2016-754)
ext/mysqlnd/mysqlndwireprotocol.c in PHP before 5.6.26 and 7.x before 7.0.11 does not verify that a BIT field has the UNSIGNEDFLAG flag, which allows remote MySQL servers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted field metadata...