CVE-2021-43396

🗓️ 04 Nov 2021 19:52:49Reported by Debian Security Bug TrackerType

debiancve🔗 security-tracker.debian.org👁 25 Views

Security issue in GNU C Library (glibc) 2.34 allows remote attackers to manipulate iconv() to emit spurious '\0' character, affecting data integrity in certain cases

Reporter	Title	Published	Views	Family All 59
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v5.0.3 is vulnerable to multiple Operator package issues	12 Dec 202416:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge v4.8.7 is vulnerable to multiple Operator package issues	26 Mar 202503:42	–	ibm
ATTACKERKB	CVE-2021-43396	4 Nov 202120:15	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : compat-libpthread-nonshared, glibc, glibc-all-langpacks (ALAS2023-2025-988)	2 Jun 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : glibc (EulerOS-SA-2022-1006)	28 Jan 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : glibc (EulerOS-SA-2022-1026)	28 Jan 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : glibc (EulerOS-SA-2022-1164)	23 Feb 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : glibc (EulerOS-SA-2022-1240)	25 Feb 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : glibc (EulerOS-SA-2022-1252)	25 Feb 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : glibc (EulerOS-SA-2022-1267)	1 Mar 202200:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	all	glibc	2.31-13+deb11u3	glibc_2.31-13+deb11u3_all.deb
Debian	12	all	glibc	2.32-5	glibc_2.32-5_all.deb
Debian	13	all	glibc	2.32-5	glibc_2.32-5_all.deb
Debian	14	all	glibc	2.32-5	glibc_2.32-5_all.deb
Debian	999	all	glibc	2.32-5	glibc_2.32-5_all.deb

04 Nov 2021 19:52Current

8.5High risk

Vulners AI Score8.5

CVSS 25

CVSS 3.17.5

EPSS0.03063