Vulnetix
Try Vulnetix Request Demo
CVE-2016-6293 PUBLISHED

The uloc_acceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ does not ensure that there is a '\0' character at the end of a certain temporary array, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a call with a long httpAcceptLanguage argument.

EPSS 3.56% · 87.6th percentile

Risk Scores

EPSS Score
3.56%
87.6th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSicu0, 4.8.1.1-12ubuntu2, 4.8.1.1-13+nmu1
Ubuntu:16.04:LTSicu0, 55.1-4ubuntu1, 55.1-6ubuntu1

Timeline

References

Open in Interactive Console →