CVE-2017-14952
Fixed in a distro release EPSS 5%
Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary code via a crafted string, aka a "redundant UVector entry clean up function call" issue.
Products: icu-project international_components_for_unicode
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | icu | 60.1-1 |
| Arch Linux | lib32-icu | 60.1-1 |
| Debian 12 | icu | 57.1-7 |
| Debian 13 | icu | 57.1-7 |
| Debian 14 | icu | 57.1-7 |
| SUSE Enterprise Storage 4 | icu | 52.1-8.7.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | icu | 52.1-8.7.1 |
| SUSE Linux Enterprise Server 11 SP4 | icu | 4.0-47.6.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | icu | 52.1-8.7.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | icu | 52.1-8.7.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | icu | 52.1-8.7.1 |
| SUSE Linux Enterprise Server 12 SP3 | icu | 52.1-8.7.1 |
| SUSE Linux Enterprise Server 12-LTSS | icu | 52.1-8.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | icu | 4.0-47.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | icu | 52.1-8.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | icu | 52.1-8.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | icu | 52.1-8.7.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | icu | 4.0-47.6.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | icu | 52.1-8.7.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP3 | icu | 52.1-8.7.1 |
| SUSE OpenStack Cloud 7 | icu | 52.1-8.7.1 |
| Ubuntu 14.04 LTS | icu | 52.1-3ubuntu0.7 |
| Ubuntu 16.04 LTS | icu | 55.1-7ubuntu0.3 |