- Vulnerability/
- USN-4305-1
17/3/2020
USN-4305-1: ICU vulnerability
First published: Tue Mar 17 2020(Updated: )
André Bargull discovered that ICU incorrectly handled certain strings. An attacker could possibly use this issue to execute arbitrary code.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/libicu63 | <63.2-2ubuntu0.1 | 63.2-2ubuntu0.1 |
| Ubuntu Ubuntu | =19.10 | |
| All of | ||
| ubuntu/libicu60 | <60.2-3ubuntu3.1 | 60.2-3ubuntu3.1 |
| Ubuntu Ubuntu | =18.04 | |
| All of | ||
| ubuntu/libicu55 | <55.1-7ubuntu0.5 | 55.1-7ubuntu0.5 |
| Ubuntu Ubuntu | =16.04 | |
| All of | ||
| ubuntu/libicu52 | <52.1-3ubuntu0.8+esm1 | 52.1-3ubuntu0.8+esm1 |
| Ubuntu Ubuntu | =14.04 | |
| All of | ||
| ubuntu/libicu48 | <4.8.1.1-3ubuntu0.10 | 4.8.1.1-3ubuntu0.10 |
| Ubuntu Ubuntu | =12.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2020-10531
- https://launchpad.net/ubuntu/+source/icu/63.2-2ubuntu0.1
- https://launchpad.net/ubuntu/+source/icu/60.2-3ubuntu3.1
- https://launchpad.net/ubuntu/+source/icu/55.1-7ubuntu0.5
- https://launchpad.net/ubuntu/+source/icu/52.1-3ubuntu0.8+esm1
- https://launchpad.net/ubuntu/+source/icu/4.8.1.1-3ubuntu0.10
- https://ubuntu.com/security/notices/USN-4305-1 (Advisory)
Frequently Asked Questions
What is the vulnerability ID of USN-4305-1?
USN-4305-1 is the vulnerability ID for the ICU vulnerability.
Who discovered the ICU vulnerability?
André Bargull discovered the ICU vulnerability.
What is the impact of the ICU vulnerability?
The ICU vulnerability could allow an attacker to execute arbitrary code.
Which versions of Ubuntu are affected by the ICU vulnerability?
The ICU vulnerability affects Ubuntu versions 19.10, 18.04, 16.04, 14.04, and 12.04.
How can I fix the ICU vulnerability?
To fix the ICU vulnerability, update the libicu package to the recommended remedy version.
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/title
- agent/type
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/19.10
- version/ubuntu ubuntu/18.04
- version/ubuntu ubuntu/16.04
- version/ubuntu ubuntu/14.04
- version/ubuntu ubuntu/12.04