icu (SUSE:Linux Enterprise Software Development Kit 11 SP4) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Software Development Kit 11 SP4 package icu, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (8)

• CVE-2017-17484 — CVSS 9.8 (critical): The ucnv_UTF8FromUTF8 function in ucnv_u8.cpp in International Components for Unicode (ICU) for C/C++ through 60.1 mishandles…
• CVE-2014-9911 — CVSS 9.8 (critical): Stack-based buffer overflow in the ures_getByKeyWithFallback function in common/uresbund.cpp in International Components for Unicode (ICU)…
• CVE-2016-6293 — CVSS 9.8 (critical): The uloc_acceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ does not…
• CVE-2017-14952 — CVSS 9.8 (critical): Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute…
• CVE-2014-9654 — CVSS 9.8 (critical): The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before…
• CVE-2017-7868 — CVSS 7.5 (high): International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow…
• CVE-2017-7867 — CVSS 7.5 (high): International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow…
• CVE-2017-15422 — CVSS 6.5 (medium): Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in…