CVE-2017-15422

Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

References

Affected packages

Debian:11 / icu

Package

Name: icu
Purl: pkg:deb/debian/icu?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

57.1-9

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / icu

Package

Name: icu
Purl: pkg:deb/debian/icu?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

57.1-9

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / icu

Package

Name: icu
Purl: pkg:deb/debian/icu?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

57.1-9

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/unicode-org/icu

Affected ranges

Type: GIT
Repo: https://github.com/unicode-org/icu
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

89bae57bd0570109ca997e8b6b887f851b9c26e0

Affected versions

Other

last-cvs-commit

milestone-59-0-1

milestone-60-0-1

release-59-rc

release-60-rc