In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an internal state reset. This may affect data integrity in certain iconv() use cases. NOTE: the vendor states "the bug cannot be invoked through user input and requires iconv to be invoked with a NULL inbuf, which ought to require a separate application bug to do so unintentionally. Hence there's no security impact to the bug.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade glibc-langpack-isUpgrade glibc-langpack-lgUpgrade glibc-langpack-ckbUpgrade glibc-langpack-papUpgrade glibc-langpack-tnUpgrade glibc-langpack-igUpgrade glibc-langpack-csbUpgrade glibc-langpack-arUpgrade glibc-langpack-nanUpgrade glibc-langpack-idUpgrade glibc-langpack-berUpgrade glibc-langpack-miUpgrade glibc-langpack-saUpgrade glibc-langpack-esUpgrade glibc-langpack-iaUpgrade glibc-langpack-enUpgrade glibc-langpack-tigUpgrade glibc-langpack-paUpgrade glibc-langpack-miqUpgrade glibc-debuginfoUpgrade glibc-benchtests-debuginfoUpgrade glibc-langpack-zuUpgrade glibc-langpack-nnUpgrade glibc-langpack-sdUpgrade glibc-langpack-teUpgrade glibc-langpack-zhUpgrade glibc-langpack-swUpgrade glibc-langpack-koUpgrade glibc-langpack-mnUpgrade glibc-nss-develUpgrade glibc-langpack-psUpgrade glibc-langpack-asUpgrade glibc-langpack-dsbUpgrade glibc-langpack-bemUpgrade glibc-langpack-mlUpgrade glibc-langpack-rwUpgrade glibc-langpack-siUpgrade glibc-langpack-satUpgrade glibc-langpack-theUpgrade glibc-all-langpacksUpgrade glibc-gconv-extra-debuginfoUpgrade glibc-langpack-mfeUpgrade glibc-langpack-waUpgrade glibc-langpack-guUpgrade glibc-docUpgrade glibc-langpack-urUpgrade glibc-langpack-nrUpgrade glibc-langpack-kokUpgrade glibc-langpack-xhUpgrade glibc-langpack-brxUpgrade nss_db-debuginfoUpgrade glibc-langpack-tpiUpgrade glibc-langpack-anpUpgrade glibc-langpack-yoUpgrade glibc-langpack-cvUpgrade glibc-langpack-filUpgrade glibc-langpack-mgUpgrade glibc-langpack-ttUpgrade glibc-langpack-veUpgrade glibc-langpack-afUpgrade glibc-langpack-agrUpgrade glibc-langpack-trUpgrade glibc-langpack-lnUpgrade glibc-langpack-mrUpgrade glibc-gconv-extraUpgrade glibc-langpack-shnUpgrade glibc-langpack-anUpgrade glibc-langpack-maiUpgrade glibc-langpack-seUpgrade glibc-langpack-skUpgrade glibc-langpack-stUpgrade glibc-langpack-kkUpgrade glibc-langpack-akUpgrade glibc-staticUpgrade glibc-langpack-szlUpgrade glibc-langpack-cmnUpgrade glibc-langpack-shsUpgrade glibc-langpack-yuwUpgrade glibc-langpack-sidUpgrade glibc-langpack-tlUpgrade glibc-langpack-htUpgrade glibc-langpack-jaUpgrade glibc-langpack-kaUpgrade libnsl-debuginfoUpgrade compat-libpthread-nonsharedUpgrade glibc-langpack-gezUpgrade glibc-langpack-scUpgrade glibc-langpack-aycUpgrade glibc-langpack-niuUpgrade glibc-langpack-orUpgrade glibc-utilsUpgrade glibc-langpack-ffUpgrade glibc-langpack-frUpgrade glibc-langpack-heUpgrade glibc-langpack-hneUpgrade glibc-langpack-klUpgrade glibc-langpack-amUpgrade glibc-langpack-dzUpgrade glibc-langpack-loUpgrade glibc-langpack-csUpgrade glibc-langpack-deUpgrade glibc-develUpgrade glibc-langpack-etUpgrade glibc-langpack-chrUpgrade glibc-minimal-langpackUpgrade glibc-langpack-thUpgrade glibc-langpack-taUpgrade glibc-langpack-svUpgrade glibc-langpack-neUpgrade glibc-langpack-nbUpgrade glibc-langpack-mnwUpgrade glibc-commonUpgrade nscdUpgrade glibc-langpack-uzUpgrade glibc-langpack-toUpgrade glibc-langpack-unmUpgrade glibc-langpack-ruUpgrade glibc-langpack-nhnUpgrade glibc-langpack-plUpgrade glibc-langpack-omUpgrade glibc-langpack-ndsUpgrade glibc-langpack-msUpgrade glibc-langpack-kabUpgrade glibc-langpack-iuUpgrade glibc-langpack-lzhUpgrade glibc-langpack-huUpgrade glibc-langpack-hsbUpgrade glibc-langpack-faUpgrade glibc-langpack-dvUpgrade glibc-utils-debuginfoUpgrade glibc-langpack-brUpgrade glibc-langpack-bgUpgrade libnslUpgrade glibc-headers-x86Upgrade glibc-langpack-bhoUpgrade glibc-langpack-azUpgrade glibc-langpack-cyUpgrade glibc-langpack-glUpgrade glibc-langpack-daUpgrade glibc-langpack-doiUpgrade glibc-langpack-kwUpgrade glibc-langpack-haUpgrade glibc-langpack-tsUpgrade glibc-langpack-ptUpgrade glibc-langpack-quzUpgrade glibc-langpack-myUpgrade nss_hesiodUpgrade glibc-langpack-sqUpgrade glibc-langpack-itUpgrade glibc-langpack-lbUpgrade glibc-langpack-fyUpgrade glibc-common-debuginfoUpgrade glibc-langpack-ksUpgrade sysroot-x86_64-fc34-glibcUpgrade glibc-langpack-kyUpgrade glibcUpgrade glibc-langpack-kmUpgrade glibc-langpack-ikUpgrade glibc-langpack-mtUpgrade glibc-langpack-kuUpgrade glibc-langpack-smUpgrade glibc-langpack-gaUpgrade glibc-langpack-hakUpgrade glibc-langpack-caUpgrade glibc-langpack-sgsUpgrade glibc-langpack-tgUpgrade glibc-langpack-ceUpgrade glibc-langpack-yiUpgrade nscd-debuginfoUpgrade glibc-langpack-bsUpgrade glibc-langpack-boUpgrade glibc-langpack-lvUpgrade glibc-langpack-nsoUpgrade glibc-langpack-eoUpgrade glibc-langpack-srUpgrade glibc-langpack-ssUpgrade glibc-langpack-lijUpgrade glibc-langpack-gdUpgrade glibc-langpack-crhUpgrade glibc-langpack-bhbUpgrade glibc-langpack-beUpgrade glibc-locale-sourceUpgrade glibc-langpack-walUpgrade glibc-langpack-fiUpgrade glibc-langpack-euUpgrade glibc-langpack-bnUpgrade glibc-langpack-biUpgrade glibc-langpack-aaUpgrade nss_hesiod-debuginfoUpgrade glibc-langpack-yueUpgrade glibc-langpack-slUpgrade glibc-langpack-rajUpgrade glibc-langpack-osUpgrade glibc-langpack-mkUpgrade glibc-langpack-magUpgrade glibc-langpack-liUpgrade glibc-langpack-furUpgrade glibc-langpack-foUpgrade glibc-langpack-roUpgrade glibc-langpack-elUpgrade glibc-langpack-soUpgrade glibc-langpack-astUpgrade glibc-langpack-hyUpgrade glibc-langpack-nlUpgrade glibc-langpack-bynUpgrade glibc-langpack-waeUpgrade glibc-langpack-tiUpgrade glibc-langpack-woUpgrade glibc-langpack-ukUpgrade glibc-langpack-ugUpgrade glibc-langpack-tkUpgrade glibc-langpack-sahUpgrade glibc-langpack-mjwUpgrade glibc-langpack-mhrUpgrade glibc-debugsourceUpgrade glibc-benchtestsUpgrade nss_dbUpgrade glibc-langpack-ocUpgrade glibc-langpack-mniUpgrade glibc-langpack-ltUpgrade glibc-langpack-viUpgrade glibc-langpack-hiUpgrade glibc-langpack-hrUpgrade sysroot-aarch64-fc34-glibcUpgrade glibc-langpack-tcyUpgrade glibc-langpack-knUpgrade glibc-langpack-hifUpgrade glibc-langpack-gv | Jun 3, 2025 | Nov 1, 2021 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Nov 4, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade glibcUpgrade glibc-all-langpacksUpgrade glibc-commonUpgrade nscdUpgrade libnslUpgrade glibc-locale-source | Feb 28, 2022 | Nov 4, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade glibc-develUpgrade glibc-commonUpgrade glibc-staticUpgrade glibcUpgrade glibc-utilsUpgrade glibc-headersUpgrade nscd | Feb 24, 2022 | Nov 4, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade glibc-staticUpgrade glibcUpgrade glibc-headersUpgrade nscdUpgrade glibc-utilsUpgrade glibc-commonUpgrade glibc-devel | Mar 2, 2022 | Nov 4, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade glibc-all-langpacksUpgrade glibc-commonUpgrade glibcUpgrade nscdUpgrade glibc-debugutilsUpgrade libnslUpgrade glibc-locale-source | Jan 28, 2022 | Nov 4, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub