CVE-2017-17484
Fixed in a distro release EPSS 4%
The ucnv_UTF8FromUTF8 function in ucnv_u8.cpp in International Components for Unicode (ICU) for C/C++ through 60.1 mishandles ucnv_convertEx calls for UTF-8 to UTF-8 conversion, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted string, as demonstrated by ZNC.
Products: icu-project international_components_for_unicode
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Enterprise Storage 4 | icu | 52.1-8.7.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | icu | 52.1-8.7.1 |
| SUSE Linux Enterprise Server 11 SP4 | icu | 4.0-47.6.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | icu | 52.1-8.7.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | icu | 52.1-8.7.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | icu | 52.1-8.7.1 |
| SUSE Linux Enterprise Server 12 SP3 | icu | 52.1-8.7.1 |
| SUSE Linux Enterprise Server 12-LTSS | icu | 52.1-8.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | icu | 4.0-47.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | icu | 52.1-8.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | icu | 52.1-8.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | icu | 52.1-8.7.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | icu | 4.0-47.6.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | icu | 52.1-8.7.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP3 | icu | 52.1-8.7.1 |
| SUSE OpenStack Cloud 7 | icu | 52.1-8.7.1 |