USN-3610-1: ICU vulnerability
Published Mar 28, 2018
·Updated
It was discovered that ICU incorrectly handled certain calendars. If an application using ICU processed crafted data, a remote attacker could possibly cause it to crash, leading to a denial of service.
Affected Software
1 affected component
ICU International Components for Unicode
Event History
Feb 19, 2026
Advisory Published
via Ubuntu·09:22 PM
Data Sourced
via Ubuntu·09:22 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this ICU vulnerability?
The vulnerability ID for this ICU vulnerability is USN-3610-1.
2
What is the severity of the ICU vulnerability?
The severity of the ICU vulnerability is not mentioned in the provided information.
3
How does the ICU vulnerability impact applications?
The ICU vulnerability can cause a denial of service if an application using ICU processes crafted data.
4
Which versions of Ubuntu are affected by the ICU vulnerability?
The versions of Ubuntu affected by the ICU vulnerability are 17.10, 16.04, and 14.04.
5
How can the ICU vulnerability be fixed?
The ICU vulnerability can be fixed by updating the libicuXX package to the recommended version mentioned in the provided information.