Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-1989-1
HistoryOct 15, 2013 - 12:00 a.m.

ICU vulnerabilities

2013-10-1500:00:00
ubuntu.com
44

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.021

Percentile

89.1%

JSON

Releases

  • Ubuntu 13.04
  • Ubuntu 12.10
  • Ubuntu 12.04

Packages

  • icu - International Components for Unicode library

Details

It was discovered that ICU contained a race condition affecting multi-
threaded applications. If an application using ICU processed crafted data,
an attacker could cause it to crash or potentially execute arbitrary code
with the privileges of the user invoking the program. This issue only
affected Ubuntu 12.04 LTS and Ubuntu 12.10. (CVE-2013-0900)

It was discovered that ICU incorrectly handled memory operations. If an
application using ICU processed crafted data, an attacker could cause it to
crash or potentially execute arbitrary code with the privileges of the user
invoking the program. (CVE-2013-2924)

OSVersionArchitecturePackageVersionFilename
Ubuntu13.04noarchlibicu48< 4.8.1.1-12ubuntu0.1UNKNOWN
Ubuntu13.04noarchlibicu-dev< 4.8.1.1-12ubuntu0.1UNKNOWN
Ubuntu13.04noarchlibicu48-dbg< 4.8.1.1-12ubuntu0.1UNKNOWN
Ubuntu12.10noarchlibicu48< 4.8.1.1-8ubuntu0.1UNKNOWN
Ubuntu12.10noarchlibicu-dev< 4.8.1.1-8ubuntu0.1UNKNOWN
Ubuntu12.10noarchlibicu48-dbg< 4.8.1.1-8ubuntu0.1UNKNOWN
Ubuntu12.04noarchlibicu48< 4.8.1.1-3ubuntu0.1UNKNOWN
Ubuntu12.04noarchlib32icu-dev< 4.8.1.1-3ubuntu0.1UNKNOWN
Ubuntu12.04noarchlib32icu48< 4.8.1.1-3ubuntu0.1UNKNOWN
Ubuntu12.04noarchlibicu-dev< 4.8.1.1-3ubuntu0.1UNKNOWN
Rows per page:
1-10 of 111

Related

debian 4
openvas 36
fedora 8
nessus 30
osv 2
mageia 3
gentoo 2
securityvulns 3
prion 2
jvn 2
cvelist 2
cve 2
nvd 2
ubuntucve 2
debiancve 2
suse 2
chrome 2
freebsd 2
threatpost 1
oracle 1
debian
debian
[SECURITY] [DSA 2786-1] icu security update
2013-10-27 21:12:42
[SECURITY] [DSA 2786-1] icu security update
2013-10-27 21:12:42
[SECURITY] [DSA 2785-1] chromium-browser security update
2013-10-26 19:03:01
openvas
openvas
Debian Security Advisory DSA 2786-1 (icu - several vulnerabilities)
2013-10-27 00:00:00
Ubuntu Update for icu USN-1989-1
2013-10-18 00:00:00
Fedora Update for icu FEDORA-2013-18774
2013-10-28 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: icu-49.1.1-12.fc18
2013-10-26 00:57:03
[SECURITY] Fedora 20 Update: mingw-icu-50.1.2-3.fc20
2014-06-10 03:07:55
[SECURITY] Fedora 19 Update: icu-50.1.2-9.fc19
2013-10-26 00:59:24
nessus
nessus
Debian DSA-2786-1 : icu - several vulnerabilities
2013-10-29 00:00:00
Mandriva Linux Security Advisory : icu (MDVSA-2013:258)
2013-10-29 00:00:00
GLSA-201402-14 : International Components for Unicode: Denial of Service
2014-02-11 00:00:00
osv
osv
icu - several
2013-10-27 00:00:00
chromium-browser - several
2013-10-26 00:00:00
mageia
mageia
Updated icu packages fix multiple security vulnerbilities
2013-10-26 00:57:48
Updated icu packages fix CVE-2013-2924
2013-10-26 01:00:50
Updated chromium-browser-stable packages fix security vulnerabilities
2013-10-17 22:53:27
gentoo
gentoo
International Components for Unicode: Denial of service
2014-02-10 00:00:00
Chromium, V8: Multiple vulnerabilities
2013-09-24 00:00:00
securityvulns
securityvulns
Google ICU security vulnerabilities
2013-11-05 00:00:00
[ MDVSA-2013:258 ] icu
2013-11-05 00:00:00
Oracle / Sun / MySQL / PeopleSoft / OpenJDK applications multiple security vulnerabilities
2014-05-05 00:00:00
prion
prion
Design/Logic Flaw
2013-10-02 10:35:00
Race condition
2013-02-23 21:55:00
jvn
jvn
JVN#85336306: Use-after-free vulnerability in multiple products that use International Components for Unicode (ICU)
2013-10-30 00:00:00
JVN#70739377: Multiple products that use International Components for Unicode (ICU) vulnerable to denial-of-service (DoS)
2013-10-30 00:00:00
cvelist
cvelist
CVE-2013-2924
2013-10-02 10:00:00
CVE-2013-0900
2013-02-23 21:00:00
cve
cve
CVE-2013-2924
2013-10-02 10:35:35
CVE-2013-0900
2013-02-23 21:55:02
nvd
nvd
CVE-2013-2924
2013-10-02 10:35:35
CVE-2013-0900
2013-02-23 21:55:02
ubuntucve
ubuntucve
CVE-2013-2924
2013-10-02 00:00:00
CVE-2013-0900
2013-02-23 00:00:00
debiancve
debiancve
CVE-2013-2924
2013-10-02 10:35:35
CVE-2013-0900
2013-02-23 21:55:02
suse
suse
chromium: 30.0.1599.66 security and bugfix update (important)
2013-10-16 18:04:12
chromium: update to 31.0.1650.57 (important)
2013-12-12 18:05:02
chrome
chrome
Stable Channel Update
2013-10-01 00:00:00
Stable Channel Update
2013-02-21 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2013-10-01 00:00:00
chromium -- multiple vulnerabilities
2013-02-21 00:00:00
threatpost
threatpost
Chrome 25 Fixes Nine High-Risk Vulnerabilities
2013-02-22 15:20:19
oracle
oracle
Oracle Critical Patch Update - January 2014
2014-01-14 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.021

Percentile

89.1%

JSON
Related for USN-1989-1
debian4openvas36fedora8nessus30osv2mageia3gentoo2securityvulns3prion2jvn2cvelist2cve2nvd2ubuntucve2debiancve2suse2chrome2freebsd2threatpost1oracle1