USN-4305-1: ICU vulnerability
Published Mar 17, 2020
·Updated
André Bargull discovered that ICU incorrectly handled certain strings. An attacker could possibly use this issue to execute arbitrary code.
Affected Software
1 affected component
ICU ICU
Event History
Oct 14, 2026
Advisory Published
via Ubuntu·09:01 AM
Data Sourced
via Ubuntu·09:01 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of USN-4305-1?
USN-4305-1 is the vulnerability ID for the ICU vulnerability.
2
Who discovered the ICU vulnerability?
André Bargull discovered the ICU vulnerability.
3
What is the impact of the ICU vulnerability?
The ICU vulnerability could allow an attacker to execute arbitrary code.
4
Which versions of Ubuntu are affected by the ICU vulnerability?
The ICU vulnerability affects Ubuntu versions 19.10, 18.04, 16.04, 14.04, and 12.04.
5
How can I fix the ICU vulnerability?
To fix the ICU vulnerability, update the libicu package to the recommended remedy version.