Lucene search

K
ubuntuUbuntuUSN-6737-1
HistoryApr 18, 2024 - 12:00 a.m.

GNU C Library vulnerability

2024-04-1800:00:00
ubuntu.com
56
ubuntu
23.10
22.04 lts
20.04 lts
glibc
gnu c library
denial of service
arbitrary code
vulnerability
security

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

17.1%

Releases

  • Ubuntu 23.10
  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS

Packages

  • glibc - GNU C Library

Details

Charles Fol discovered that the GNU C Library iconv feature incorrectly
handled certain input sequences. An attacker could use this issue to cause
the GNU C Library to crash, resulting in a denial of service, or possibly
execute arbitrary code.

Rows per page:
1-10 of 671

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

17.1%