Vulnerability   
Search   
    Search 191973 CVE descriptions
and 86218 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.702786
Category:Debian Local Security Checks
Title:Debian Security Advisory DSA 2786-1 (icu - several vulnerabilities)
Summary:The Google Chrome Security Team discovered two issues (a race condition;and a use-after-free issue) in the International Components for Unicode;(ICU) library.
Description:Summary:
The Google Chrome Security Team discovered two issues (a race condition
and a use-after-free issue) in the International Components for Unicode
(ICU) library.

Affected Software/OS:
icu on Debian Linux

Solution:
For the oldstable distribution (squeeze), these problems have been fixed
in version 4.4.1-8+squeeze2.

For the stable distribution (wheezy), which is only affected by
CVE-2013-2924
, this problem has been fixed in version 4.8.1.1-12+deb7u1.

For the testing distribution (jessie), which is only affected by
CVE-2013-2924
, this problem will be fixed soon.

For the unstable distribution (sid), which is only affected by
CVE-2013-2924
, this problem has been fixed in version 4.8.1.1-13+nmu1.

We recommend that you upgrade your icu packages.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2013-0900
Debian Security Information: DSA-2786 (Google Search)
http://www.debian.org/security/2013/dsa-2786
http://jvn.jp/en/jp/JVN70739377/index.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16404
SuSE Security Announcement: openSUSE-SU-2013:0454 (Google Search)
http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html
Common Vulnerability Exposure (CVE) ID: CVE-2013-2924
BugTraq ID: 64758
http://www.securityfocus.com/bid/64758
Debian Security Information: DSA-2785 (Google Search)
http://www.debian.org/security/2013/dsa-2785
http://jvn.jp/en/jp/JVN85336306/index.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19017
SuSE Security Announcement: openSUSE-SU-2013:1556 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00002.html
SuSE Security Announcement: openSUSE-SU-2013:1861 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2013-12/msg00002.html
SuSE Security Announcement: openSUSE-SU-2014:0065 (Google Search)
http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html
CopyrightCopyright (C) 2013 Greenbone Networks GmbH http://greenbone.net

This is only one of 86218 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2020 E-Soft Inc. All rights reserved.