CVE-2020-10531: international components for unicode through 66.1 (inclusive); +14 more affected products

Affected technology

international components for unicode · through 66.1 (inclusive)
icu-project

enterprise linux desktop · 6.0
redhat

enterprise linux server · 6.0
redhat

enterprise linux workstation · 6.0
redhat

chrome · before 80.0.3987.122 (exclusive)
google

fedora · 30
fedoraproject

fedora · 31
fedoraproject

fedora · 33
fedoraproject

debian linux · 8.0
debian

debian linux · 9.0
debian

debian linux · 10.0
debian

ubuntu linux · 12.04
canonical

ubuntu linux · 14.04
canonical

ubuntu linux · 16.04
canonical

ubuntu linux · 18.04
canonical

ubuntu linux · 19.10
canonical

leap · 15.1
opensuse

banking extensibility workbench · 14.3.0
oracle

banking extensibility workbench · 14.4.0
oracle

node.js · from 10.0.0 (inclusive), through 10.12.0 (inclusive)
nodejs

node.js · from 10.13.0 (inclusive), before 10.21.0 (exclusive)
nodejs

n/a · n/a
Vendor not specified by the source

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Description’s affected range: through 66.1

Component: Not specified by the source
Function: in

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · User interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.