Summary
It was discovered that ICU incorrectly handled certain calendars. If an
application using ICU processed crafted data, a remote attacker could
possibly cause it to crash, leading to a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | icu | 52.1-3ubuntu0.8 |
| Ubuntu · 16.04 LTS 16.04:LTS | icu | 55.1-7ubuntu0.4 |
Vulnerabilities 1
-
Unscored —
Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as…
References
-
report
https://ubuntu.com/security/CVE-2017-15422