CVE-2020-10531

NameCVE-2020-10531
DescriptionAn issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
ReferencesDLA-2151-1, DSA-4646-1
NVD severitymedium
Debian Bugs953747

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
icu (PTS)jessie52.1-8+deb8u7vulnerable
jessie (security)52.1-8+deb8u8fixed
stretch57.1-6+deb9u3vulnerable
stretch (security)57.1-6+deb9u4fixed
buster63.1-6vulnerable
buster (security)63.1-6+deb10u1fixed
bullseye, sid63.2-3fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
icusource(unstable)63.2-3953747
icusourcebuster63.1-6+deb10u1DSA-4646-1
icusourceexperimental66.1-2
icusourcejessie52.1-8+deb8u8DLA-2151-1
icusourcestretch57.1-6+deb9u4DSA-4646-1

Notes

https://bugs.chromium.org/p/chromium/issues/detail?id=1044570 (not public)
Upstream ICU bug: https://unicode-org.atlassian.net/browse/ICU-20958 (private)
Fixed by: https://github.com/unicode-org/icu/commit/b7d08bc04a4296982fcef8b6b8a354a9e4e7afca
https://github.com/unicode-org/icu/pull/971

Search for package or bug name: Reporting problems