Vulnerability Details CVE-2020-21913
International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the file tools/pkgdata/pkgdata.cpp.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 32.4%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 4.3
References
- https://github.com/unicode-org/icu/pull/886
- https://lists.debian.org/debian-lts-announce/2021/10/msg00008.html
- https://unicode-org.atlassian.net/browse/ICU-20850
- https://www.debian.org/security/2021/dsa-5014
- https://github.com/unicode-org/icu/pull/886
- https://lists.debian.org/debian-lts-announce/2021/10/msg00008.html
- https://unicode-org.atlassian.net/browse/ICU-20850
- https://www.debian.org/security/2021/dsa-5014
Products affected by CVE-2020-21913
-
cpe:2.3:a:unicode:international_components_for_unicode:4.8.2
-
cpe:2.3:a:unicode:international_components_for_unicode:50.1.2
-
cpe:2.3:a:unicode:international_components_for_unicode:50.2
-
cpe:2.3:a:unicode:international_components_for_unicode:51.2
-
cpe:2.3:a:unicode:international_components_for_unicode:51.3
-
cpe:2.3:a:unicode:international_components_for_unicode:52.1
-
cpe:2.3:a:unicode:international_components_for_unicode:52.1.1
-
cpe:2.3:a:unicode:international_components_for_unicode:52.2
-
cpe:2.3:a:unicode:international_components_for_unicode:53.1
-
cpe:2.3:a:unicode:international_components_for_unicode:53.2
-
cpe:2.3:a:unicode:international_components_for_unicode:54.1
-
cpe:2.3:a:unicode:international_components_for_unicode:54.1.1
-
cpe:2.3:a:unicode:international_components_for_unicode:54.2
-
cpe:2.3:a:unicode:international_components_for_unicode:55.1
-
cpe:2.3:a:unicode:international_components_for_unicode:55.2
-
cpe:2.3:a:unicode:international_components_for_unicode:56.1
-
cpe:2.3:a:unicode:international_components_for_unicode:56.2
-
cpe:2.3:a:unicode:international_components_for_unicode:57.1
-
cpe:2.3:a:unicode:international_components_for_unicode:57.2
-
cpe:2.3:a:unicode:international_components_for_unicode:58.1
-
cpe:2.3:a:unicode:international_components_for_unicode:58.2
-
cpe:2.3:a:unicode:international_components_for_unicode:58.3
-
cpe:2.3:a:unicode:international_components_for_unicode:59
-
cpe:2.3:a:unicode:international_components_for_unicode:59.1
-
cpe:2.3:a:unicode:international_components_for_unicode:59.2
-
cpe:2.3:a:unicode:international_components_for_unicode:60
-
cpe:2.3:a:unicode:international_components_for_unicode:60.1
-
cpe:2.3:a:unicode:international_components_for_unicode:60.2
-
cpe:2.3:a:unicode:international_components_for_unicode:60.3
-
cpe:2.3:a:unicode:international_components_for_unicode:61
-
cpe:2.3:a:unicode:international_components_for_unicode:61.1
-
cpe:2.3:a:unicode:international_components_for_unicode:61.2
-
cpe:2.3:a:unicode:international_components_for_unicode:62
-
cpe:2.3:a:unicode:international_components_for_unicode:62.1
-
cpe:2.3:a:unicode:international_components_for_unicode:62.2
-
cpe:2.3:a:unicode:international_components_for_unicode:63
-
cpe:2.3:a:unicode:international_components_for_unicode:63.1
-
cpe:2.3:a:unicode:international_components_for_unicode:63.2
-
cpe:2.3:a:unicode:international_components_for_unicode:64
-
cpe:2.3:a:unicode:international_components_for_unicode:64.1
-
cpe:2.3:a:unicode:international_components_for_unicode:64.2
-
cpe:2.3:a:unicode:international_components_for_unicode:65
-
cpe:2.3:a:unicode:international_components_for_unicode:65.1
-
cpe:2.3:a:unicode:international_components_for_unicode:66
-
cpe:2.3:o:debian:debian_linux:10.0
-
cpe:2.3:o:debian:debian_linux:9.0