First published: Thu Jan 22 2015(Updated: )
The Regular Expressions package in International Components for Unicode (ICU) allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a zero-length quantifier.
Credit: cve-coordination@google.com
Affected Software | Affected Version | How to fix |
---|---|---|
Red Hat Enterprise Linux Desktop | =6.0 | |
Red Hat Enterprise Linux Server Supplementary | =6.0 | |
Red Hat Enterprise Linux Server Supplementary EUS | =6.6.z | |
Red Hat Enterprise Linux Workstation Supplementary | =6.0 | |
openSUSE | =13.1 | |
openSUSE | =13.2 | |
Google Chrome | <=40.0.2214.85 | |
Sun iPlanet Messaging Server | =7.0.5 | |
Sun iPlanet Messaging Server | =8.0 | |
ICU (International Components for Unicode) | <55.1 | |
Ubuntu | =14.04 | |
Ubuntu | =14.10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-7926 is classified as a denial of service vulnerability that can lead to memory corruption.
To address CVE-2014-7926, upgrade to the latest version of the affected software packages that contain the necessary security patches.
CVE-2014-7926 affects various software including Red Hat Enterprise Linux, openSUSE, Google Chrome, and ICU (International Components for Unicode).
Yes, CVE-2014-7926 can be exploited by remote attackers through specially crafted regular expressions.
Exploitation of CVE-2014-7926 can lead to denial of service, resulting in application crashes or unexpected behavior.