Red Hat Security AdvisoryRHSA-2008:0090
icu security update
Released 2008-01-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) icu-3.6-5.11.1, icu-3.6-5.11.1.i386, icu-3.6-5.11.1.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) icu-3.6-5.11.1, icu-3.6-5.11.1.i386, libicu-3.6-5.11.1 +3
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) icu-3.6-5.11.1, libicu-devel-3.6-5.11.1, libicu-devel-3.6-5.11.1.i386
Fixes 2 records
Priority MEDIUM 45
Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode (ICU) 3.8.1 and earlier allows context-dependent attackers to cause a denial of service (memory cons…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.02538 · Published 2008-01-28 · Fixed CWE-399
Priority LOW 35
libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group zero (aka \0), which might allow context-dependent attackers to read from, or wri…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02934 · Published 2008-01-28 · Fixed CWE-399
