CVE-2020-29562

The CVE-2020-29562 issue affects glibc (GNU C Library) 2.30–2.32, where iconv processing of UCS4 text containing an irreversible character triggers an assertion failure and aborts the process, potentially causing a denial of service. Connected advisories and vendor feeds confirm the vulnerability...

CVE-2020-29562

The iconv function in the GNU C Library aka glibc or libc6 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service...

GNU C Library 安全漏洞

The GNU C Library glibc is an open-source, free, easy-to-download C compiler released under the LGPL license. An assertion failure vulnerability exists in the iconv function in GNU C Library versions 2.30 through 2.32. An attacker can exploit this vulnerability to cause a denial of service via UC...

CVE-2020-29562: Reachable Assertion

The iconv function in the GNU C Library aka glibc or libc6 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service...

CVE-2020-27618

A flaw was found in glibc. If an attacker provides the iconv function with invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, IBM1399 encodings, it fails to advance the input state, which could lead to an infinite loop in applications, resulting in a denial of service...

The vulnerability of the iconv utility in the GNU C Library (glibc) system library arises from insufficient input validation, allowing attackers to trigger a service failure.

The vulnerability of the iconv utility in the GNU C Library glibc is related to insufficient input validation. Exploiting this vulnerability could allow a malicious actor to cause service failures when invoking the iconv utility with the “-c” option...

php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers()

Function iconvmimedecodeheaders in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash...

Fedora 30 : php (2020-96cb012029)

PHP version 7.3.17 16 Apr 2020 Core: - Fixed bug php79364 When copy empty array, next key is unspecified. cmb - Fixed bug php78210 Invalid pointer address. cmb, Nikita CURL: - Fixed bug php79199 curlcopyhandle memory leak. cmb Date: - Fixed bug php79396 DateTime hour incorrect during DST jump...

Fedora 31 : php (2020-62ee541bbb)

PHP version 7.3.17 16 Apr 2020 Core: - Fixed bug php79364 When copy empty array, next key is unspecified. cmb - Fixed bug php78210 Invalid pointer address. cmb, Nikita CURL: - Fixed bug php79199 curlcopyhandle memory leak. cmb Date: - Fixed bug php79396 DateTime hour incorrect during DST jump...

Huawei EulerOS: Security Advisory for php (EulerOS-SA-2018-1309)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for php (EulerOS-SA-2019-1249)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for php (EulerOS-SA-2019-1247)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for php (EulerOS-SA-2019-1069)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the streaming filter iconv (ext/iconv/iconv.c) in the PHP programming language interpreter allows a hacker to cause a service failure.

The vulnerability of the stream filter iconv ext/iconv/iconv.c in the PHP programming language is related to an infinite loop that can occur due to input errors. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

glibc security update

2.28-72.0.1 - add Ampere emag to tunable cpu list Patrick McGehearty - add optimized memset for emag - add an ASIMD variant of strlen for falkor - Orabug: 2700101. - Modify glibc-ora28849085.patch so it works with RHCK kernels. - Orabug: 28849085. - Make IOfunlockfile match funlockfile and...

Denial Of Service (DoS)

PHP is vulnerable to denial of service DoS. An infinite loop is possible in ext/iconv/iconv.c when streaming filter with convert.incov on invalid sequence, leading to an application crash...

php: Out-of-bounds read due to integer overflow in iconv_mime_decode_headers()

Function iconvmimedecodeheaders in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash...

php: Infinite loop in ext/iconv/iconv.c when using stream filter with convert.incov on invalid sequence leads to denial-of-service

An infinite loop vulnerability was found in ext/iconv/iconv.c in PHP due to the iconv stream not rejecting invalid multibyte sequences. A remote attacker could use this vulnerability to hang the php process and consume resources...

FreeBSD : FreeBSD -- iconv buffer overflow (f62bba56-b309-11e9-a87f-a4badb2f4699)

With certain inputs, iconv may write beyond the end of the output buffer. Impact : Depending on the way in which iconv is used, an attacker may be able to create a denial of service, provoke incorrect program behavior, or induce a remote code execution. iconv is a libc library function and the...

FreeBSD buffer overflow vulnerability (CNVD-2019-21251)

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in the iconv implementation in FreeBSD. An attacker could exploit this vulnerability to cause a denial of service, resulting in a program running incorrectly or executing code...