Heap-based buffer overflow in icu (Alpine package)



Risk High
Patch available YES
Number of vulnerabilities 1
CVE-ID CVE-2017-7868
CWE-ID CWE-122
Exploitation vector Network
Public exploit N/A
Vulnerable software
 icu (Alpine package)
Operating systems & Components / Operating system package or component

Vendor Alpine Linux Development Team

Security Bulletin

This security bulletin contains one high risk vulnerability.

1) Heap-based buffer overflow

EUVDB-ID: #VU7569

Risk: High

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2017-7868

CWE-ID: CWE-122 - Heap-based Buffer Overflow

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to boundary error in utf8TextAccess function in common/utext.cpp and the utext_moveIndex32* function in International Components for Unicode (ICU) for C/C++ before 2017-02-13. A remote unauthenticated attacker can trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

icu (Alpine package): 55.1-r0 - 55.1-r2

CPE2.3 External links

https://git.alpinelinux.org/aports/commit/?id=fd73d20c538bd7ec54c38d9cd87f9e1b387128c4
https://git.alpinelinux.org/aports/commit/?id=334ebffde9dec34becdd628ad56007699e98ea81
https://git.alpinelinux.org/aports/commit/?id=1caeb82fe92fda30c392b98096174b584433763b
https://git.alpinelinux.org/aports/commit/?id=7f0ae8bb320acc329d7437c4a5c975b197ac1095
https://git.alpinelinux.org/aports/commit/?id=aed0c2d1a6d20e48cdc0ecaff89883d567d7331d
https://git.alpinelinux.org/aports/commit/?id=afb2d6502f38c7b5b18bac53ecd8d08dcb59d14c
https://git.alpinelinux.org/aports/commit/?id=cef6067bc39e2ebbefc2bd09d08765c52ecc424c


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###