NetSight
IP …
high8.8

CVE-2020-10531

An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1.

Impact

An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.

Affected products

VendorProductAffected versions
Icu-ProjectInternational Components For Unicode
through 66.1
RedhatEnterprise Linux Desktop
Version 6.0
RedhatEnterprise Linux Server
Version 6.0
RedhatEnterprise Linux Workstation
Version 6.0
GoogleChrome
before 80.0.3987.122
FedoraprojectFedora
Versions 30, 31, 33
DebianDebian Linux
Versions 8.0, 9.0, 10.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 18.04, 19.10
OpensuseLeap
Version 15.1
OracleBanking Extensibility Workbench
Versions 14.3.0, 14.4.0
NodejsNode.Js
from 10.0.0 through 10.12.0
from 10.13.0 before 10.21.0

Weakness classification

CWE-190CWE-787

References