PT-2020-17190
CVE-2020-29562
·
تاريخ النشر
2020-12-04
·
تاريخ التحديث
2026-10-14
الوصف من
CVSS 3.1
4.8
متوسطةالمقاييسAV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
GNU C Library (aka glibc or libc6) versions 2.30 through 2.32
Description
The iconv function in the GNU C Library, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.
Recommendations
For versions 2.30 through 2.32, consider updating to a version where this issue is fixed, as the current version may abort the program when encountering irreversible characters during UCS4 text conversion.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾