Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-101180
HistoryNov 08, 2021 - 12:00 a.m.

GNU C Library has unspecified vulnerabilities

2021-11-0800:00:00
China National Vulnerability Database
www.cnvd.org.cn
12

0.007 Low

EPSS

Percentile

79.5%

The GNU C Library (glibc, libc6) is an open source, free C compiler released under the LGPL license. version 2.34 of the GNU C Library (aka glibc) contains a security vulnerability that stems from a data validation issue in the affected version of the library, iconvdata/iso-2022-jp-3.c’s iconv( ) in the affected repository has a data validation issue. An attacker could exploit this vulnerability to force iconv( ) to emit a false 0 character accompanied by an internal state reset via crafted ISO-2022-JP-3 data. In some iconv() use cases, this could compromise data integrity.

CPENameOperatorVersion
gnu c libraryeq2.34