Security fix for CVE-2017-15422

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

icu was updated to fix two security issues.

These security issues were fixed :

CVE-2014-8147: The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) used an integer data type that is inconsistent with a header file, which allowed remote attackers to cause a denial of service (incorrect malloc followed by invalid free) or possibly execute arbitrary code via crafted text (bsc#929629).

CVE-2014-8146: The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Components for Unicode (ICU) did not properly track directionally isolated pieces of text, which allowed remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via crafted text (bsc#929629).

CVE-2016-6293: The uloc_acceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode (ICU) for C/C++ did not ensure that there is a '\0' character at the end of a certain temporary array, which allowed remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a call with a long httpAcceptLanguage argument (bsc#990636).

CVE-2017-7868: International Components for Unicode (ICU) for C/C++ 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utext_moveIndex32* function (bsc#1034674)

CVE-2017-7867: International Components for Unicode (ICU) for C/C++ 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utext_setNativeIndex* function (bsc#1034678)

CVE-2017-14952: Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ allowed remote attackers to execute arbitrary code via a crafted string, aka a 'redundant UVector entry clean up function call' issue (bnc#1067203)

CVE-2017-17484: The ucnv_UTF8FromUTF8 function in ucnv_u8.cpp in International Components for Unicode (ICU) for C/C++ mishandled ucnv_convertEx calls for UTF-8 to UTF-8 conversion, which allowed remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted string, as demonstrated by ZNC (bnc#1072193)

CVE-2017-15422: An integer overflow in icu during persian calendar date processing could lead to incorrect years shown (bnc#1077999)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the icu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Unspecified vulnerability in the Java SE and Java SE     Embedded components in Oracle Java SE 6u105, 7u91, and     8u66 and Java SE Embedded 8u65 allows remote attackers     to affect confidentiality, integrity, and availability     via unknown vectors related to 2D.(CVE-2016-0494)

  - Unspecified vulnerability in Oracle Java SE 6u101,     7u85, and 8u60, and Java SE Embedded 8u51, allows     remote attackers to affect confidentiality, integrity,     and availability via unknown vectors related to     2D.(CVE-2015-4844)

  - International Components for Unicode (ICU) for C/C++     before 2017-02-13 has an out-of-bounds write caused by     a heap-based buffer overflow related to the     utf8TextAccess function in common/utext.cpp and the     utext_moveIndex32* function.(CVE-2017-7868)

  - International Components for Unicode (ICU) for C/C++     before 2017-02-13 has an out-of-bounds write caused by     a heap-based buffer overflow related to the     utf8TextAccess function in common/utext.cpp and the     utext_setNativeIndex* function.(CVE-2017-7867)

  - The Regular Expressions package in International     Components for Unicode (ICU) for C/C++ before     2014-12-03, as used in Google Chrome before     40.0.2214.91, calculates certain values without     ensuring that they can be represented in a 24-bit     field, which allows remote attackers to cause a denial     of service (memory corruption) or possibly have     unspecified other impact via a crafted string, a     related issue to CVE-2014-7923.(CVE-2014-9654)

  - Stack-based buffer overflow in the Locale class in     common/locid.cpp in International Components for     Unicode (ICU) through 57.1 for C/C++ allows remote     attackers to cause a denial of service (application     crash) or possibly have unspecified other impact via a     long locale string.(CVE-2016-7415)

  - The uloc_acceptLanguageFromHTTP function in     common/uloc.cpp in International Components for Unicode     (ICU) through 57.1 for C/C++ does not ensure that there     is a '\0' character at the end of a certain temporary     array, which allows remote attackers to cause a denial     of service (out-of-bounds read) or possibly have     unspecified other impact via a call with a long     httpAcceptLanguage argument.(CVE-2016-6293)

  - The collator implementation in i18n/ucol.cpp in     International Components for Unicode (ICU) 52 through     SVN revision 293126, as used in Google Chrome before     40.0.2214.91, does not initialize memory for a data     structure, which allows remote attackers to cause a     denial of service or possibly have unspecified other     impact via a crafted character sequence.(CVE-2014-7940)

  - The Regular Expressions package in International     Components for Unicode (ICU) 52 before SVN revision     292944, as used in Google Chrome before 40.0.2214.91,     allows remote attackers to cause a denial of service     (memory corruption) or possibly have unspecified other     impact via vectors related to a zero-length     quantifier.(CVE-2014-7926)

  - The Regular Expressions package in International     Components for Unicode (ICU) 52 before SVN revision     292944, as used in Google Chrome before 40.0.2214.91,     allows remote attackers to cause a denial of service     (memory corruption) or possibly have unspecified other     impact via vectors related to a look-behind     expression.(CVE-2014-7923)

  - Integer overflow in international date handling in     International Components for Unicode (ICU) for C/C++     before 60.1, as used in V8 in Google Chrome prior to     63.0.3239.84 and other products, allowed a remote     attacker to perform an out of bounds memory read via a     crafted HTML page.(CVE-2017-15422)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is running a version of Mac OS X that is 10.13.x prior to 10.13.2. It is, therefore, affected by multiple vulnerabilities in the following components :

  - apache
  - curl
  - Directory Utility
  - IOAcceleratorFamily
  - IOKit
  - Intel Graphics Driver
  - Kernel
  - Mail
  - Mail Drafts
  - OpenSSL
  - Screen Sharing Server

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

The version of Google Chrome installed on the remote macOS host is prior to 63.0.3239.84. It is, therefore, affected by multiple vulnerabilities as referenced in the 2017_12_stable-channel-update-for-desktop advisory.

  - Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2017-15413)

  - Out-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a remote     attacker to gain code execution via a malicious server. (CVE-2017-15407)

  - Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to     potentially exploit heap corruption via a crafted PDF file that is mishandled by PDFium. (CVE-2017-15408)

  - Heap buffer overflow in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2017-15409)

  - Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially     exploit heap corruption via a crafted PDF file. (CVE-2017-15410, CVE-2017-15411)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security fix for CVE-2017-15412 CVE-2017-15422 CVE-2017-15407 CVE-2017-15408 CVE-2017-15409 CVE-2017-15410 CVE-2017-15411 CVE-2017-15413 CVE-2017-15415 CVE-2017-15416 CVE-2017-15417 CVE-2017-15418 CVE-2017-15419 CVE-2017-15420 CVE-2017-15423 CVE-2017-15424 CVE-2017-15425 CVE-2017-15426 CVE-2017-15427 CVE-2017-15429

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Google Chrome Releases reports :

37 security fixes in this release, including :

- [778505] Critical CVE-2017-15407: Out of bounds write in QUIC.
Reported by Ned Williamson on 2017-10-26

- [762374] High CVE-2017-15408: Heap buffer overflow in PDFium.
Reported by Ke Liu of Tencent's Xuanwu LAB on 2017-09-06

- [763972] High CVE-2017-15409: Out of bounds write in Skia. Reported by Anonymous on 2017-09-11

- [765921] High CVE-2017-15410: Use after free in PDFium. Reported by Luat Nguyen of KeenLab, Tencent on 2017-09-16

- [770148] High CVE-2017-15411: Use after free in PDFium. Reported by Luat Nguyen of KeenLab, Tencent on 2017-09-29

- [727039] High CVE-2017-15412: Use after free in libXML. Reported by Nick Wellnhofer on 2017-05-27

- [766666] High CVE-2017-15413: Type confusion in WebAssembly.
Reported by Gaurav Dewan of Adobe Systems India Pvt. Ltd. on 2017-09-19

- [765512] Medium CVE-2017-15415: Pointer information disclosure in IPC call. Reported by Viktor Brange of Microsoft Offensive Security Research Team on 2017-09-15

- [779314] Medium CVE-2017-15416: Out of bounds read in Blink.
Reported by Ned Williamson on 2017-10-28

- [699028] Medium CVE-2017-15417: Cross origin information disclosure in Skia. Reported by Max May on 2017-03-07

- [765858] Medium CVE-2017-15418: Use of uninitialized value in Skia.
Reported by Kushal Arvind Shah of Fortinet's FortiGuard Labs on 2017-09-15

- [780312] Medium CVE-2017-15419: Cross origin leak of redirect URL in Blink. Reported by Jun Kokatsu on 2017-10-31

- [777419] Medium CVE-2017-15420: URL spoofing in Omnibox. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-10-23

- [774382] Medium CVE-2017-15422: Integer overflow in ICU. Reported by Yuan Deng of Ant-financial Light-Year Security Lab on 2017-10-13

- [780484] Medium CVE-2017-15430: Unsafe navigation in Chromecast Plugin. Reported by jinmo123 on 2017-01-11

- [778101] Low CVE-2017-15423: Issue with SPAKE implementation in BoringSSL. Reported by Greg Hudson on 2017-10-25

- [756226] Low CVE-2017-15424: URL Spoof in Omnibox. Reported by Khalil Zhani on 2017-08-16

- [756456] Low CVE-2017-15425: URL Spoof in Omnibox. Reported by xisigr of Tencent's Xuanwu Lab on 2017-08-17

- [757735] Low CVE-2017-15426: URL Spoof in Omnibox. Reported by WenXu Wu of Tencent's Xuanwu Lab on 2017-08-18

- [768910] Low CVE-2017-15427: Insufficient blocking of JavaScript in Omnibox. Reported by Junaid Farhan on 2017-09-26

- [792099] Various fixes from internal audits, fuzzing and other initiatives

This update updates QtWebEngine to the 5.10.1 bugfix and security release. QtWebEngine 5.10.1 is part of the Qt 5.10.1 release, but only the QtWebEngine component is included in this update.

This update includes :

  - Security fixes from Chromium up to version     64.0.3282.140. Including: CVE-2017-15407,     CVE-2017-15409, CVE-2017-15410, CVE-2017-15411,     CVE-2017-15415, CVE-2017-15416, CVE-2017-15418,     CVE-2017-15419, CVE-2017-15422, CVE-2017-15423,     CVE-2017-15424, CVE-2017-15425, CVE-2017-15426,     CVE-2018-6031, CVE-2018-6033, CVE-2018-6034,     CVE-2018-6036, CVE-2018-6037, CVE-2018-6038,     CVE-2018-6040, CVE-2018-6041, CVE-2018-6042,     CVE-2018-6047, CVE-2018-6048, CVE-2018-6050,     CVE-2018-6051, CVE-2018-6052, CVE-2018-6053 and     CVE-2018-6054.

  - Mitigations for SPECTRE: disabled shared-buffers, added     cryptographic noise to precision timers

  - [QTBUG-47206] Fixed incorrect layouting due to bug in     HTML5 viewport support.

  - [QTBUG-47945, QTBUG-65647] Fixed random crashes on exit

  - [QTBUG-57206] Fixed regression in viewport handling in     embedded mode

  - [QTBUG-58400] Improved memory usage when printing

  - [QTBUG-63867] Fixed <canvas> elements when compiled     without OpenGL

  - [QTBUG-63266, QTBUG-64436] Fixed that pointerType of     Pointer Events was empty

  - [QTBUG-63606] Improved runtime disabling and clearing of     HTTP cache

  - [QTBUG-64436] QtWebEngineWidgets: Fixed crash when     exiting fullscreen mode using the context menu.

  - [QTBUG-64560] Fixed rendering glitches after     renderProcessTerminated signal was emitted.

  - [QTBUG-64812] Fixed message bubble position in Hi-DPI     mode

  - [QTBUG-64869, QTBUG-65004] Added testing for 32-bit host     compiler when crossbuilding to 32-bit platforms

  - [QTBUG-64933] QtWebEngineWidgets: Fixed tooltips that     did still show after mouse was moved away.

  - [QTBUG-65239] Fixed hanging of process if application is     closed too fast after startup.

  - [QTBUG-65715] Fixed double margins when printing

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3610-1 advisory.

    It was discovered that ICU incorrectly handled certain calendars. If an application using ICU processed     crafted data, a remote attacker could possibly cause it to crash, leading to a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

icu was updated to fix two security issues.

These security issues were fixed :

  - CVE-2014-8147: The resolveImplicitLevels function in     common/ubidi.c in the Unicode Bidirectional Algorithm     implementation in ICU4C in International Components for     Unicode (ICU) used an integer data type that is     inconsistent with a header file, which allowed remote     attackers to cause a denial of service (incorrect malloc     followed by invalid free) or possibly execute arbitrary     code via crafted text (bsc#929629).

  - CVE-2014-8146: The resolveImplicitLevels function in     common/ubidi.c in the Unicode Bidirectional Algorithm     implementation in ICU4C in International Components for     Unicode (ICU) did not properly track directionally     isolated pieces of text, which allowed remote attackers     to cause a denial of service (heap-based buffer     overflow) or possibly execute arbitrary code via crafted     text (bsc#929629).

  - CVE-2016-6293: The uloc_acceptLanguageFromHTTP function     in common/uloc.cpp in International Components for     Unicode (ICU) for C/C++ did not ensure that there is a     '\0' character at the end of a certain temporary array,     which allowed remote attackers to cause a denial of     service (out-of-bounds read) or possibly have     unspecified other impact via a call with a long     httpAcceptLanguage argument (bsc#990636).

  - CVE-2017-7868: International Components for Unicode     (ICU) for C/C++ 2017-02-13 has an out-of-bounds write     caused by a heap-based buffer overflow related to the     utf8TextAccess function in common/utext.cpp and the     utext_moveIndex32* function (bsc#1034674)

  - CVE-2017-7867: International Components for Unicode     (ICU) for C/C++ 2017-02-13 has an out-of-bounds write     caused by a heap-based buffer overflow related to the     utf8TextAccess function in common/utext.cpp and the     utext_setNativeIndex* function (bsc#1034678)

  - CVE-2017-14952: Double free in i18n/zonemeta.cpp in     International Components for Unicode (ICU) for C/C++     allowed remote attackers to execute arbitrary code via a     crafted string, aka a 'redundant UVector entry clean up     function call' issue (bnc#1067203)

  - CVE-2017-17484: The ucnv_UTF8FromUTF8 function in     ucnv_u8.cpp in International Components for Unicode     (ICU) for C/C++ mishandled ucnv_convertEx calls for     UTF-8 to UTF-8 conversion, which allowed remote     attackers to cause a denial of service (stack-based     buffer overflow and application crash) or possibly have     unspecified other impact via a crafted string, as     demonstrated by ZNC (bnc#1072193)

  - CVE-2017-15422: An integer overflow in icu during     persian calendar date processing could lead to incorrect     years shown (bnc#1077999)

This update was imported from the SUSE:SLE-12:Update update project.

According to the versions of the icu package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - Integer overflow in international date handling in     International Components for Unicode (ICU) for C/C++     before 60.1, as used in V8 in Google Chrome prior to     63.0.3239.84 and other products, allowed a remote     attacker to perform an out of bounds memory read via a     crafted HTML page.(CVE-2017-15422)

  - An issue was discovered in International Components for     Unicode (ICU) for C/C++ through 66.1. An integer     overflow, leading to a heap-based buffer overflow,     exists in the UnicodeString::doAppend() function in     common/unistr.cpp.(CVE-2020-10531)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the icu packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Integer overflow in international date handling in     International Components for Unicode (ICU) for C/C++     before 60.1, as used in V8 in Google Chrome prior to     63.0.3239.84 and other products, allowed a remote     attacker to perform an out of bounds memory read via a     crafted HTML page.(CVE-2017-15422)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++     before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote     attacker to perform an out of bounds memory read via a crafted HTML page. (CVE-2017-15422)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2017:3401 advisory.

  - chromium-browser: out of bounds write in quic (CVE-2017-15407)

  - chromium-browser: heap buffer overflow in pdfium (CVE-2017-15408)

  - chromium-browser: out of bounds write in skia (CVE-2017-15409)

  - chromium-browser: use after free in pdfium (CVE-2017-15410, CVE-2017-15411)

  - libxml2: Use after free in xmlXPathCompOpEvalPositionalPredicate() function in xpath.c (CVE-2017-15412)

  - chromium-browser: type confusion in webassembly (CVE-2017-15413)

  - chromium-browser: pointer information disclosure in ipc call (CVE-2017-15415)

  - chromium-browser: out of bounds read in blink (CVE-2017-15416)

  - chromium-browser: cross origin information disclosure in skia (CVE-2017-15417)

  - chromium-browser: use of uninitialized value in skia (CVE-2017-15418)

  - chromium-browser: cross origin leak of redirect url in blink (CVE-2017-15419)

  - chromium-browser: url spoofing in omnibox (CVE-2017-15420)

  - chromium-browser: integer overflow in icu (CVE-2017-15422)

  - chromium-browser: issue with spake implementation in boringssl (CVE-2017-15423)

  - chromium-browser: url spoof in omnibox (CVE-2017-15424, CVE-2017-15425, CVE-2017-15426)

  - chromium-browser: insufficient blocking of javascript in omnibox (CVE-2017-15427)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 63.0.3239.84. It is, therefore, affected by multiple vulnerabilities as referenced in the 2017_12_stable-channel-update-for-desktop advisory.

  - Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2017-15413)

  - Out-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a remote     attacker to gain code execution via a malicious server. (CVE-2017-15407)

  - Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to     potentially exploit heap corruption via a crafted PDF file that is mishandled by PDFium. (CVE-2017-15408)

  - Heap buffer overflow in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2017-15409)

  - Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially     exploit heap corruption via a crafted PDF file. (CVE-2017-15410, CVE-2017-15411)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update to Chromium 63.0.3239.84 fixes the following security issues :

  - CVE-2017-15408: Heap buffer overflow in PDFium

  - CVE-2017-15409: Out of bounds write in Skia

  - CVE-2017-15410: Use after free in PDFium

  - CVE-2017-15411: Use after free in PDFium

  - CVE-2017-15412: Use after free in libXML

  - CVE-2017-15413: Type confusion in WebAssembly

  - CVE-2017-15415: Pointer information disclosure in IPC     call

  - CVE-2017-15416: Out of bounds read in Blink

  - CVE-2017-15417: Cross origin information disclosure in     Skia

  - CVE-2017-15418: Use of uninitialized value in Skia

  - CVE-2017-15419: Cross origin leak of redirect URL in     Blink

  - CVE-2017-15420: URL spoofing in Omnibox

  - CVE-2017-15422: Integer overflow in ICU

  - CVE-2017-15423: Issue with SPAKE implementation in     BoringSSL

  - CVE-2017-15424: URL Spoof in Omnibox

  - CVE-2017-15425: URL Spoof in Omnibox

  - CVE-2017-15426: URL Spoof in Omnibox

  - CVE-2017-15427: Insufficient blocking of JavaScript in     Omnibox

icu was updated to fix two security issues. These security issues were fixed :

  - CVE-2014-8147: The resolveImplicitLevels function in     common/ubidi.c in the Unicode Bidirectional Algorithm     implementation in ICU4C in International Components for     Unicode (ICU) used an integer data type that is     inconsistent with a header file, which allowed remote     attackers to cause a denial of service (incorrect malloc     followed by invalid free) or possibly execute arbitrary     code via crafted text (bsc#929629).

  - CVE-2014-8146: The resolveImplicitLevels function in     common/ubidi.c in the Unicode Bidirectional Algorithm     implementation in ICU4C in International Components for     Unicode (ICU) did not properly track directionally     isolated pieces of text, which allowed remote attackers     to cause a denial of service (heap-based buffer     overflow) or possibly execute arbitrary code via crafted     text (bsc#929629).

  - CVE-2016-6293: The uloc_acceptLanguageFromHTTP function     in common/uloc.cpp in International Components for     Unicode (ICU) for C/C++ did not ensure that there is a     '\0' character at the end of a certain temporary array,     which allowed remote attackers to cause a denial of     service (out-of-bounds read) or possibly have     unspecified other impact via a call with a long     httpAcceptLanguage argument (bsc#990636).

  - CVE-2017-7868: International Components for Unicode     (ICU) for C/C++ 2017-02-13 has an out-of-bounds write     caused by a heap-based buffer overflow related to the     utf8TextAccess function in common/utext.cpp and the     utext_moveIndex32* function (bsc#1034674)

  - CVE-2017-7867: International Components for Unicode     (ICU) for C/C++ 2017-02-13 has an out-of-bounds write     caused by a heap-based buffer overflow related to the     utf8TextAccess function in common/utext.cpp and the     utext_setNativeIndex* function (bsc#1034678)

  - CVE-2017-14952: Double free in i18n/zonemeta.cpp in     International Components for Unicode (ICU) for C/C++     allowed remote attackers to execute arbitrary code via a     crafted string, aka a 'redundant UVector entry clean up     function call' issue (bnc#1067203)

  - CVE-2017-17484: The ucnv_UTF8FromUTF8 function in     ucnv_u8.cpp in International Components for Unicode     (ICU) for C/C++ mishandled ucnv_convertEx calls for     UTF-8 to UTF-8 conversion, which allowed remote     attackers to cause a denial of service (stack-based     buffer overflow and application crash) or possibly have     unspecified other impact via a crafted string, as     demonstrated by ZNC (bnc#1072193)

  - CVE-2017-15422: An integer overflow in icu during     persian calendar date processing could lead to incorrect     years shown (bnc#1077999)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Fedora 28 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2018-aafdbb5554 advisory.

    Update to Chromium 65. For EPEL7, it has been a long time since a successful build has been possible, so     this will fix a LOT of CVEs.

    CVE-2017-15396     CVE-2017-15407 CVE-2017-15408 CVE-2017-15409 CVE-2017-15410 CVE-2017-15411 CVE-2017-15412 CVE-2017-15413     CVE-2017-15415 CVE-2017-15416 CVE-2017-15417 CVE-2017-15418 CVE-2017-15419 CVE-2017-15420 CVE-2017-15422     CVE-2018-6056 CVE-2018-6406     CVE-2018-6057 CVE-2018-6058 CVE-2018-6059 CVE-2018-6060 CVE-2018-6061 CVE-2018-6062 CVE-2018-6063     CVE-2018-6064 CVE-2018-6065 CVE-2018-6066 CVE-2018-6067 CVE-2018-6068 CVE-2018-6069 CVE-2018-6070     CVE-2018-6071

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
117531	Fedora 27 : icu (2018-1a85045c79)	Nessus	Fedora Local Security Checks	2018/9/18	2024/8/7	medium
118258	SUSE SLES12 Security Update : icu (SUSE-SU-2018:1401-2)	Nessus	SuSE Local Security Checks	2018/10/22	2022/2/7	critical
135616	EulerOS Virtualization 3.0.2.2 : icu (EulerOS-SA-2020-1454)	Nessus	Huawei Local Security Checks	2020/4/16	2024/3/15	critical
105080	macOS 10.13.x < 10.13.2 Multiple Vulnerabilities (Meltdown)	Nessus	MacOS X Local Security Checks	2017/12/7	2026/1/14	high
105153	Google Chrome < 63.0.3239.84 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2017/12/11	2025/11/24	high
105968	Fedora 27 : chromium (2017-c2645aa935)	Nessus	Fedora Local Security Checks	2018/1/15	2025/11/4	high
106236	FreeBSD : chromium -- multiple vulnerabilities (1d951e85-ffdb-11e7-8b91-e8e0b747a45a)	Nessus	FreeBSD Local Security Checks	2018/1/23	2025/11/3	high
107035	Fedora 26 : qt5-qtwebengine (2018-c0d3db441f)	Nessus	Fedora Local Security Checks	2018/2/28	2025/10/27	high
108708	Ubuntu 14.04 LTS / 16.04 LTS : ICU vulnerability (USN-3610-1)	Nessus	Ubuntu Local Security Checks	2018/3/29	2024/8/27	medium
110107	openSUSE Security Update : icu (openSUSE-2018-517)	Nessus	SuSE Local Security Checks	2018/5/25	2024/10/1	critical
136271	EulerOS Virtualization for ARM 64 3.0.2.0 : icu (EulerOS-SA-2020-1568)	Nessus	Huawei Local Security Checks	2020/5/1	2024/3/13	high
140866	EulerOS 2.0 SP3 : icu (EulerOS-SA-2020-2099)	Nessus	Huawei Local Security Checks	2020/9/28	2024/2/19	medium
220553	Linux Distros Unpatched Vulnerability : CVE-2017-15422	Nessus	Misc.	2025/3/4	2025/9/15	medium
105091	RHEL 6 : chromium-browser (RHSA-2017:3401)	Nessus	Red Hat Local Security Checks	2017/12/8	2024/4/27	high
105152	Google Chrome < 63.0.3239.84 Multiple Vulnerabilities	Nessus	Windows	2017/12/11	2025/11/24	high
105235	openSUSE Security Update : chromium (openSUSE-2017-1349)	Nessus	SuSE Local Security Checks	2017/12/14	2025/11/11	high
110093	SUSE SLED12 / SLES12 Security Update : icu (SUSE-SU-2018:1401-1)	Nessus	SuSE Local Security Checks	2018/5/24	2024/10/1	critical
120695	Fedora 28 : chromium (2018-aafdbb5554)	Nessus	Fedora Local Security Checks	2019/1/3	2025/9/1	high

检测

插件搜索

medium

critical

critical

high

high

high

high

high

medium

critical

high

medium

medium

high

high

high

critical

high