IM
IronMonkey Threat Research

CVE-2020-10531 HIGH

Published: 2020-03-12 | Last Modified: 2024-11-21 | Status: Modified

Description

An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.

Additional Descriptions (1)

Se detectó un problema en International Components for Unicode (ICU) para C/C++ versiones hasta 66.1. Se presenta un desbordamiento de enteros, conllevando a un desbordamiento de búfer en la región heap de la memoria, en la función UnicodeString::doAppend() en el archivo common/unistr.cpp.

CVSS Metrics

Base Score: 8.8 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionREQUIRED
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactHIGH
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 2.8

Impact Score: 5.9

Base Score: 6.8 (MEDIUM)

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access VectorNETWORK
Access ComplexityMEDIUM
AuthenticationNONE
Confidentiality ImpactPARTIAL
Integrity ImpactPARTIAL
Availability ImpactPARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 8.6

Impact Score: 6.4

Weaknesses

Source Type Description
[email protected] Primary
en CWE-190
en CWE-787

Affected Products

Vendor Product Version Update Type
icu-project international_components_for_unicode * <built-in method update of dict object at 0x7fd2dbc29380> Application
redhat enterprise_linux_desktop 6.0 <built-in method update of dict object at 0x7fd2dbc46800> Operating System
redhat enterprise_linux_server 6.0 <built-in method update of dict object at 0x7fd341beae40> Operating System
redhat enterprise_linux_workstation 6.0 <built-in method update of dict object at 0x7fd34118ed00> Operating System
google chrome * <built-in method update of dict object at 0x7fd341be9200> Application
fedoraproject fedora 30 <built-in method update of dict object at 0x7fd341bebb80> Operating System
fedoraproject fedora 31 <built-in method update of dict object at 0x7fd341be9600> Operating System
fedoraproject fedora 33 <built-in method update of dict object at 0x7fd3844a0e40> Operating System
debian debian_linux 8.0 <built-in method update of dict object at 0x7fd2905c1540> Operating System
debian debian_linux 9.0 <built-in method update of dict object at 0x7fd2dbc29940> Operating System
debian debian_linux 10.0 <built-in method update of dict object at 0x7fd369d6f880> Operating System
canonical ubuntu_linux 12.04 <built-in method update of dict object at 0x7fd2dbc469c0> Operating System
canonical ubuntu_linux 14.04 <built-in method update of dict object at 0x7fd3694e1b40> Operating System
canonical ubuntu_linux 16.04 <built-in method update of dict object at 0x7fd369406d80> Operating System
canonical ubuntu_linux 18.04 <built-in method update of dict object at 0x7fd341be9180> Operating System
canonical ubuntu_linux 19.10 <built-in method update of dict object at 0x7fd39c4a5fc0> Operating System
opensuse leap 15.1 <built-in method update of dict object at 0x7fd2dbc45140> Operating System
oracle banking_extensibility_workbench 14.3.0 <built-in method update of dict object at 0x7fd369d6f100> Application
oracle banking_extensibility_workbench 14.4.0 <built-in method update of dict object at 0x7fd341beab00> Application
nodejs node.js * <built-in method update of dict object at 0x7fd36b11b200> Application
nodejs node.js * <built-in method update of dict object at 0x7fd341beb640> Application

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:icu-project:international_components_for_unicode:*:*:*:*:*:c\/c\+\+:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
Yes cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
Yes cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:oracle:banking_extensibility_workbench:14.3.0:*:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:banking_extensibility_workbench:14.4.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*
Yes cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*

References