Groups > linux.debian.bugs.dist > #770657

Bug#838694: icu: CVE-2016-7415: Stack based buffer overflow in locid.cpp

From	Roberto C. Sánchez <roberto@connexer.com>
Newsgroups	linux.debian.bugs.dist
Subject	Bug#838694: icu: CVE-2016-7415: Stack based buffer overflow in locid.cpp
Date	2016-09-30 14:00 +0200
Message-ID	<sn4DU-1im-39@gated-at.bofh.it> (permalink)
References	<skCsp-6Lq-3@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

found 838694 4.8.1.1-12+deb7u3
found 838694 4.8.1.1-12+deb7u5
thanks

On Fri, Sep 23, 2016 at 07:26:28PM +0200, Salvatore Bonaccorso wrote:
> 
> the following vulnerability was published for icu.
> 
> CVE-2016-7415[0]:
> | Stack-based buffer overflow in the Locale class in common/locid.cpp in
> | International Components for Unicode (ICU) through 57.1 for C/C++
> | allows remote attackers to cause a denial of service (application
> | crash) or possibly have unspecified other impact via a long locale
> | string.
> 

I am currently preparing an LTS upload for this vulnerability.

Regards,

-Roberto

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com

Back to linux.debian.bugs.dist | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Bug#838694: icu: CVE-2016-7415: Stack based buffer overflow in locid.cpp Roberto C. Sánchez <roberto@connexer.com> - 2016-09-30 14:00 +0200
  Bug#838694: icu: CVE-2016-7415: Stack based buffer overflow in locid.cpp Roberto C. Sánchez <roberto@connexer.com> - 2016-10-02 02:50 +0200
    Bug#838694: icu: CVE-2016-7415: Stack based buffer overflow in locid.cpp Salvatore Bonaccorso <carnil@debian.org> - 2016-10-03 14:40 +0200
      Bug#838694: icu: CVE-2016-7415: Stack based buffer overflow in locid.cpp Roberto C. Sánchez <roberto@connexer.com> - 2016-10-03 16:00 +0200
      Bug#838694: icu: CVE-2016-7415: Stack based buffer overflow in locid.cpp László Böszörményi (GCS) <gcs@debian.org> - 2016-10-04 23:10 +0200
        Bug#838694: icu: CVE-2016-7415: Stack based buffer overflow in locid.cpp Salvatore Bonaccorso <carnil@debian.org> - 2016-10-05 07:20 +0200
        Bug#838694: icu: CVE-2016-7415: Stack based buffer overflow in locid.cpp Roberto C. Sánchez <roberto@connexer.com> - 2016-10-25 17:50 +0200

csiph-web