CVE-2020-21913

Name
CVE-2020-21913
Description
International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.
NVD Severity
medium
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
MISC https://github.com/unicode-org/icu/pull/886
MISC https://unicode-org.atlassian.net/browse/ICU-20850
Mailing List https://lists.debian.org/debian-lts-announce/2021/10/msg00008.html
Third Party Advisory https://www.debian.org/security/2021/dsa-5014

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:unicode:international_components_for_unicode:*:*:*:*:*:*:*:* international_components_for_unicode >= None < 66.1

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
icu edge-main 66.1-r0 None fixed
icu 3.22-main 66.1-r0 None fixed
icu 3.21-main 66.1-r0 None fixed
icu 3.20-main 66.1-r0 None fixed
icu 3.19-main 66.1-r0 None fixed
icu 3.18-main 66.1-r0 None fixed
icu 3.17-main 66.1-r0 None fixed