CVE-2014-7926
CVE-2014-7926
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a zero-length quantifier.
EPSS 2,2% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
icu Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 52.1-7.1
Actualiza a 52.1-7.1
icu Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 52.1-7.1
Actualiza a 52.1-7.1
icu Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 52.1-7.1
Actualiza a 52.1-7.1
chromium-browser Ubuntu:14.04:LTS
- Versiones
- 29.0.1547.65-0ubuntu2
- 31.0.1650.63-0ubuntu1~20131204.1
- 32.0.1700.107-0ubuntu1~20140204.977.1
- 33.0.1750.152-0ubuntu1~pkg995.1
- 34.0.1847.116-0ubuntu2
- 36.0.1985.125-0ubuntu1.14.04.0~pkg1029
- 37.0.2062.94-0ubuntu0.14.04.1~pkg1042
- 37.0.2062.120-0ubuntu0.14.04.1~pkg1049
- 38.0.2125.111-0ubuntu0.14.04.1.1061
- 39.0.2171.65-0ubuntu0.14.04.1.1064
- Intervalos de versiones afectados
- ECOSYSTEM: < 40.0.2214.94-0ubuntu0.14.04.1.1068
Actualiza a 40.0.2214.94-0ubuntu0.14.04.1.1068
icu Ubuntu:14.04:LTS
- Versiones
- 4.8.1.1-12ubuntu2
- 4.8.1.1-13+nmu1
- 4.8.1.1-13+nmu1ubuntu1
- 52.1-3
- Intervalos de versiones afectados
- ECOSYSTEM: < 52.1-3ubuntu0.2
Actualiza a 52.1-3ubuntu0.2
oxide-qt Ubuntu:14.04:LTS
- Versiones
- 1.0.0~bzr437-0ubuntu1
- 1.0.0~bzr452-0ubuntu1
- 1.0.0~bzr475-0ubuntu1
- 1.0.0~bzr490-0ubuntu1
- 1.0.0~bzr501-0ubuntu1
- 1.0.0~bzr501-0ubuntu2
- 1.0.4-0ubuntu0.14.04.1
- 1.0.5-0ubuntu0.14.04.1
- 1.1.2-0ubuntu0.14.04.1
- 1.2.5-0ubuntu0.14.04.1
- 1.3.4-0ubuntu0.14.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.4.2-0ubuntu0.14.04.1
Actualiza a 1.4.2-0ubuntu0.14.04.1
Fuentes originales
- http://secunia.com/advisories/62665
- https://chromium.googlesource.com/chromium/deps/icu52/+/6242e2fbb36f486f2c0addd1c3cef67fc4ed33fb
- https://code.google.com/p/chromium/issues/detail?id=422824
- http://bugs.icu-project.org/trac/ticket/11369
- http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html
- http://googlechromereleases.blogspot.com/2015/01/stable-update.html
- http://secunia.com/advisories/62575
- https://codereview.chromium.org/726973003
- http://www.ubuntu.com/usn/USN-2476-1
- http://www.securityfocus.com/bid/72288
- http://security.gentoo.org/glsa/glsa-201502-13.xml
- http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
- https://security.gentoo.org/glsa/201503-06
- http://www.securitytracker.com/id/1031623
- http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00005.html
- http://advisories.mageia.org/MGASA-2015-0047.html
- http://rhn.redhat.com/errata/RHSA-2015-0093.html
- http://secunia.com/advisories/62383
- https://chromium.googlesource.com/chromium/deps/icu52/+/3af4ce5982311035e5f36803d547c0befa576c8c
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
- https://nvd.nist.gov/vuln/detail/CVE-2014-7926