{"schemaVersion":3,"id":"USN-2605-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"icu vulnerabilities\n\nPedro Ribeiro discovered that ICU incorrectly handled certain memory\noperations when processing data. If an application using ICU processed\ncrafted data, an attacker could cause it to crash or potentially execute\narbitrary code with the privileges of the user invoking the program.","dates":{"published":"2015-05-11T14:58:23.000Z","modified":"2026-04-22T09:12:56.418Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"icu","name":"icu","label":"icu","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/icu","purlType":"deb","versions":[{"text":"< 52.1-3ubuntu0.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 52.1-3ubuntu0.3","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-2605-1","label":"ubuntu.com/security/notices/USN-2605-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-8146","label":"ubuntu.com/security/CVE-2014-8146","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2014-8147","label":"ubuntu.com/security/CVE-2014-8147","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2014-8146","CVE-2014-8147"],"downstream":[],"duplicates":[],"related":["CVE-2014-8146","CVE-2014-8147"]},"timeline":[{"kind":"published","date":"2015-05-11T14:58:23.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-22T09:12:56.418Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T07:24:34.954Z","stale":false,"partial":false}}