Heap-based buffer overflow in icu (Alpine package)



Risk High
Patch available YES
Number of vulnerabilities 1
CVE-ID CVE-2017-7867
CWE-ID CWE-122
Exploitation vector Network
Public exploit N/A
Vulnerable software
Subscribe 		icu (Alpine package)
Operating systems & Components / Operating system package or component

Vendor Alpine Linux Development Team

Security Bulletin

This security bulletin contains one high risk vulnerability.

1) Heap-based buffer overflow

EUVDB-ID: #VU7568

Risk: High

CVSSv3.1: 8.3 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2017-7867

CWE-ID: CWE-122 - Heap-based Buffer Overflow

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to boundary error in utf8TextAccess() function in common/utext.cpp and the utext_moveIndex32* function in International Components for Unicode (ICU) for C/C++ before 2017-02-13. A remote unauthenticated attacker can trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

icu (Alpine package): 55.1-r0 - 55.1-r2

CPE2.3 External links

http://git.alpinelinux.org/aports/commit/?id=fd73d20c538bd7ec54c38d9cd87f9e1b387128c4
http://git.alpinelinux.org/aports/commit/?id=e8ad6d532fbd6dda13b8f0dff91024771df323ba
http://git.alpinelinux.org/aports/commit/?id=1caeb82fe92fda30c392b98096174b584433763b
http://git.alpinelinux.org/aports/commit/?id=7f0ae8bb320acc329d7437c4a5c975b197ac1095
http://git.alpinelinux.org/aports/commit/?id=aed0c2d1a6d20e48cdc0ecaff89883d567d7331d
http://git.alpinelinux.org/aports/commit/?id=afb2d6502f38c7b5b18bac53ecd8d08dcb59d14c
http://git.alpinelinux.org/aports/commit/?id=cef6067bc39e2ebbefc2bd09d08765c52ecc424c


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###