CVE-2017-17484

概要

参考情報

• znc/znc · Issue Tracking
• ssl.icu-project.org/trac/attachment/ticket/13490/poc.cpp · Exploit
• ssl.icu-project.org/trac/changeset/40714 · Issue Tracking
• ssl.icu-project.org/trac/changeset/40715 · Issue Tracking
• ssl.icu-project.org/trac/ticket/13490 · Issue Tracking
• ssl.icu-project.org/trac/ticket/13510 · Issue Tracking
• oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

international components for unicode のその他の脆弱性

• CVE-2020-10531高 8.8An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based b…
• CVE-2018-18928緊急 9.8International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in …
• CVE-2017-15396中 6.5A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 60.2, as used in V8 in Google Chro…
• CVE-2017-15422中 6.5Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google…
• CVE-2017-14952緊急 9.8Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arb…