Lucene search

K
ubuntucveUbuntu.comUB:CVE-2017-7867
HistoryApr 14, 2017 - 12:00 a.m.

CVE-2017-7867

2017-04-1400:00:00
ubuntu.com
ubuntu.com
16

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.012

Percentile

85.3%

International Components for Unicode (ICU) for C/C++ before 2017-02-13 has
an out-of-bounds write caused by a heap-based buffer overflow related to
the utf8TextAccess function in common/utext.cpp and the
utext_setNativeIndex* function.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchicu< 52.1-3ubuntu0.6UNKNOWN
ubuntu16.04noarchicu< 55.1-7ubuntu0.2UNKNOWN
ubuntu16.10noarchicu< 57.1-4ubuntu0.2UNKNOWN
ubuntu17.04noarchicu< 57.1-5ubuntu0.1UNKNOWN

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.012

Percentile

85.3%