K000162688: GlibC vulnerability CVE-2026-4046

Security Advisory Description The iconv function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application. This vulnerability can be trivially mitigate...

NewStart CGSL MAIN 6.06 : glibc Vulnerability (NS-SA-2026-0058)

The remote NewStart CGSL host, running version MAIN 6.06, has glibc packages installed that are affected by a vulnerability: - The iconv function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EX...

Oracle Linux 8 : glibc (ELSA-2026-42733)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42733 advisory. - CVE-2026-5435 Out-of-bounds write via TSIG record processing RHEL-181724 - CVE-2026-5928: Fix ungetwc operating on byte stream RHEL-181725 -...

USN-8611-1 glibc vulnerabilities

It was discovered that the GNU C Library iconv function incorrectly handled certain IBM character sets. An attacker could possibly use this issue to cause a denial of service. CVE-2026-4046 It was discovered that the GNU C Library DNS functions incorrectly handled certain DNS server responses whe...

USN-8611-1: GNU C Library vulnerabilities

It was discovered that the GNU C Library iconv function incorrectly handled certain IBM character sets. An attacker could possibly use this issue to cause a denial of service. CVE-2026-4046 It was discovered that the GNU C Library DNS functions incorrectly handled certain DNS server responses whe...

EulerOS Virtualization 2.10.1 : glibc (EulerOS-SA-2026-2819)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2726)

According to the versions of the packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte an...

EulerOS Virtualization 2.10.0 : glibc (EulerOS-SA-2026-2850)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single...

Oracle Linux 10 : glibc (ELSA-2026-20594)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-20594 advisory. - CVE-2026-5450: Fix buffer overflow in scanf RHEL-172694 - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules RHEL-162885 Tenable has...

EulerOS Virtualization 2.12.0 : glibc (EulerOS-SA-2026-2772)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single...

Oracle Linux 10 : glibc (ELSA-2026-18139)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-18139 advisory. - CVE-2026-5450: Fix buffer overflow in scanf RHEL-172694 - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules RHEL-162885 Tenable has...

Oracle Linux 8 : glibc (ELSA-2026-33126)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-33126 advisory. - CVE-2026-5450: Fix buffer overflow in scanf RHEL-172700 - Add tests for CVE-2026-4437 and CVE-2026-4438 RHEL-173358 - CVE-2026-4046: Fix assertion failure in...

EulerOS 2.0 SP10 : glibc (EulerOS-SA-2026-2649)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and...

EulerOS 2.0 SP12 : glibc (EulerOS-SA-2026-2529)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and...

EulerOS 2.0 SP12 : glibc (EulerOS-SA-2026-2589)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and...

SUSE CVE-2026-58471

GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is...

ROS-20260708-73-0037

The vulnerability of the iconv function in the GNU C Library is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...

UBUNTU-CVE-2026-58471

GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is...

CVE-2026-58471

GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is...

CVE-2026-58471 GNU Wget 1.25.0 Heap Buffer Overflow via convert_fname() in url.c

GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is...