PT-2021-3327
CVE-2019-25013
·
Published
2019-09-06
·
Updated
2026-10-14
Description by
CVSS 2.0
7.1
HighMetricsAV:N/AC:M/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
glibc versions through 2.32
Description
The issue is related to a buffer over-read in the iconv feature of the GNU C Library when processing invalid multi-byte input sequences in the EUC-KR encoding. This could potentially allow a remote attacker to cause a denial of service.
Recommendations
For versions through 2.32, consider updating to a version that fixes this issue, as the current version may have a buffer over-read when processing certain input sequences in the EUC-KR encoding.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾