Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Ubuntu 17.10 Security Advisory USN-3458-1: ICU Crash Threat

ubuntu
Calendar Grey October 23, 2017
Scroller Ubuntu
Enhance your Ubuntu installation by applying the necessary updates to fix the ICU security flaw that impacts multiple versions due to improper handling of specially crafted input.
ICU could be made to crash or run arbitrary code as your login if it received specially crafted input.

Summary

ICU could be made to crash or run arbitrary code as your login

if it received specially crafted input.

Software Description:

- icu: International Components for Unicode library

Details:

It was discovered that ICU incorrectly handled certain inputs. If an

application using ICU processed crafted data, a remote attacker could

possibly cause it to crash or potentially execute arbitrary code with

the privileges of the user invoking the program.

Topics%20covered

Topics Covered

security advisory update instructions arbitrary code ubuntu input handling crash risk icu

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.10:
  libicu57                        57.1-6ubuntu0.2

Ubuntu 17.04:
  libicu57                        57.1-5ubuntu0.2

Ubuntu 16.04 LTS:
  libicu55                        55.1-7ubuntu0.3

Ubuntu 14.04 LTS:
  libicu52                        52.1-3ubuntu0.7

In general, a standard system update will make all the necessary
changes.

References

  https://ubuntu.com/security/notices/USN-3458-1

  CVE-2017-14952

Severity
important
Lowest
Low
Medium
High
Critical

October 23, 2017

Topics%20covered

Topics Covered

security advisory update instructions arbitrary code ubuntu input handling crash risk icu

Package Information

  https://launchpad.net/ubuntu/+source/icu/57.1-6ubuntu0.2
  https://launchpad.net/ubuntu/+source/icu/57.1-5ubuntu0.2
  https://launchpad.net/ubuntu/+source/icu/55.1-7ubuntu0.3
  https://launchpad.net/ubuntu/+source/icu/52.1-3ubuntu0.7

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.