In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an internal state reset. This may affect data integrity in certain iconv() use cases. NOTE: the vendor states "the bug cannot be invoked through user input and requires iconv to be invoked with a NULL inbuf, which ought to require a separate application bug to do so unintentionally. Hence there's no security impact to the bug.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade glibc-langpack-ckbUpgrade glibc-debuginfoUpgrade glibc-langpack-yoUpgrade glibc-langpack-enUpgrade glibc-langpack-urUpgrade glibc-gconv-extraUpgrade glibc-langpack-anpUpgrade glibc-langpack-kokUpgrade glibc-langpack-seUpgrade glibc-langpack-skUpgrade glibc-langpack-tnUpgrade glibc-langpack-mrUpgrade glibc-langpack-psUpgrade glibc-langpack-lgUpgrade glibc-langpack-berUpgrade glibc-langpack-stUpgrade glibc-langpack-szlUpgrade compat-libpthread-nonsharedUpgrade glibc-langpack-cmnUpgrade glibc-langpack-gezUpgrade glibc-langpack-aycUpgrade glibc-langpack-heUpgrade glibc-langpack-arUpgrade glibc-langpack-idUpgrade libnsl-debuginfoUpgrade glibc-langpack-maiUpgrade glibc-langpack-csbUpgrade glibc-langpack-yuwUpgrade glibc-langpack-tlUpgrade glibc-langpack-klUpgrade glibc-develUpgrade glibc-langpack-amUpgrade glibc-langpack-orUpgrade glibc-langpack-scUpgrade glibc-langpack-deUpgrade glibc-langpack-ffUpgrade glibc-langpack-hneUpgrade glibc-utilsUpgrade glibc-langpack-jaUpgrade glibc-langpack-loUpgrade glibc-langpack-shsUpgrade glibc-langpack-htUpgrade glibc-langpack-niuUpgrade glibc-langpack-frUpgrade glibc-langpack-dzUpgrade glibc-langpack-kaUpgrade glibc-langpack-csUpgrade glibc-langpack-sidUpgrade glibc-langpack-kkUpgrade glibc-langpack-cvUpgrade glibc-langpack-koUpgrade glibc-langpack-saUpgrade glibc-langpack-nanUpgrade glibc-langpack-xhUpgrade glibc-docUpgrade glibc-staticUpgrade glibc-langpack-igUpgrade glibc-langpack-nnUpgrade glibc-langpack-swUpgrade glibc-langpack-teUpgrade glibc-langpack-filUpgrade glibc-langpack-tigUpgrade glibc-langpack-sdUpgrade glibc-langpack-paUpgrade glibc-nss-develUpgrade glibc-benchtests-debuginfoUpgrade glibc-langpack-miqUpgrade glibc-langpack-mnUpgrade glibc-langpack-iaUpgrade glibc-langpack-rwUpgrade glibc-langpack-asUpgrade glibc-langpack-theUpgrade glibc-langpack-guUpgrade glibc-langpack-siUpgrade glibc-langpack-tpiUpgrade glibc-langpack-waUpgrade glibc-langpack-akUpgrade nss_db-debuginfoUpgrade glibc-langpack-mlUpgrade glibc-langpack-mfeUpgrade glibc-langpack-zhUpgrade glibc-all-langpacksUpgrade glibc-langpack-brxUpgrade glibc-gconv-extra-debuginfoUpgrade glibc-langpack-bemUpgrade glibc-langpack-satUpgrade glibc-langpack-dsbUpgrade glibc-langpack-papUpgrade glibc-langpack-mgUpgrade glibc-langpack-ttUpgrade glibc-langpack-trUpgrade glibc-langpack-isUpgrade glibc-langpack-miUpgrade glibc-langpack-zuUpgrade glibc-langpack-esUpgrade glibc-langpack-lnUpgrade glibc-langpack-veUpgrade glibc-langpack-anUpgrade glibc-langpack-shnUpgrade glibc-langpack-afUpgrade glibc-langpack-agrUpgrade glibc-langpack-nrUpgrade glibc-langpack-ssUpgrade glibc-langpack-hifUpgrade libnslUpgrade glibc-langpack-elUpgrade glibc-langpack-lijUpgrade glibc-langpack-daUpgrade glibc-langpack-eoUpgrade glibc-langpack-kwUpgrade glibc-langpack-sqUpgrade glibc-langpack-nlUpgrade glibc-langpack-mniUpgrade glibc-langpack-gdUpgrade glibc-langpack-beUpgrade glibc-langpack-dvUpgrade glibc-langpack-uzUpgrade glibc-langpack-walUpgrade glibc-langpack-ptUpgrade glibc-langpack-gaUpgrade glibc-langpack-crhUpgrade glibc-langpack-ikUpgrade glibc-langpack-bhbUpgrade glibc-locale-sourceUpgrade glibc-langpack-bhoUpgrade glibc-langpack-msUpgrade glibc-langpack-faUpgrade glibc-langpack-brUpgrade glibc-langpack-bgUpgrade glibc-langpack-azUpgrade glibc-headers-x86Upgrade nscdUpgrade glibc-utils-debuginfoUpgrade glibc-langpack-unmUpgrade glibc-langpack-toUpgrade glibc-langpack-plUpgrade glibc-langpack-omUpgrade glibc-langpack-nhnUpgrade glibc-langpack-lzhUpgrade glibc-langpack-kabUpgrade glibc-langpack-iuUpgrade glibc-langpack-hsbUpgrade glibc-langpack-tkUpgrade sysroot-x86_64-fc34-glibcUpgrade glibc-langpack-mhrUpgrade glibc-langpack-woUpgrade glibc-langpack-neUpgrade glibc-langpack-hiUpgrade glibc-langpack-knUpgrade glibc-langpack-taUpgrade glibc-langpack-hrUpgrade glibc-langpack-mnwUpgrade glibc-langpack-viUpgrade glibc-langpack-ocUpgrade glibc-langpack-huUpgrade glibc-langpack-fiUpgrade glibc-langpack-euUpgrade glibc-langpack-bnUpgrade glibc-langpack-biUpgrade glibc-langpack-aaUpgrade nss_hesiod-debuginfoUpgrade glibc-langpack-yueUpgrade glibc-langpack-slUpgrade glibc-langpack-roUpgrade glibc-langpack-rajUpgrade glibc-langpack-magUpgrade glibc-langpack-liUpgrade glibc-langpack-mkUpgrade glibc-langpack-foUpgrade glibc-langpack-osUpgrade glibc-langpack-furUpgrade glibc-commonUpgrade glibc-langpack-ksUpgrade nss_hesiodUpgrade glibc-langpack-lvUpgrade glibc-langpack-glUpgrade glibc-langpack-smUpgrade nscd-debuginfoUpgrade glibc-langpack-srUpgrade glibc-langpack-mtUpgrade glibc-langpack-kyUpgrade glibc-langpack-itUpgrade glibc-langpack-bsUpgrade glibc-langpack-boUpgrade glibcUpgrade glibc-common-debuginfoUpgrade glibc-langpack-nsoUpgrade glibc-langpack-kuUpgrade glibc-langpack-ukUpgrade glibc-langpack-ugUpgrade glibc-langpack-waeUpgrade glibc-langpack-tiUpgrade glibc-langpack-sahUpgrade glibc-langpack-mjwUpgrade glibc-debugsourceUpgrade nss_dbUpgrade glibc-benchtestsUpgrade glibc-langpack-quzUpgrade glibc-langpack-hakUpgrade glibc-langpack-haUpgrade glibc-langpack-fyUpgrade glibc-langpack-cyUpgrade glibc-langpack-ceUpgrade glibc-langpack-caUpgrade glibc-langpack-yiUpgrade glibc-langpack-tsUpgrade glibc-langpack-tgUpgrade glibc-langpack-sgsUpgrade glibc-langpack-myUpgrade glibc-langpack-lbUpgrade glibc-langpack-kmUpgrade glibc-langpack-doiUpgrade glibc-langpack-ndsUpgrade glibc-langpack-gvUpgrade glibc-langpack-chrUpgrade glibc-langpack-svUpgrade glibc-langpack-tcyUpgrade glibc-langpack-ltUpgrade glibc-minimal-langpackUpgrade glibc-langpack-astUpgrade glibc-langpack-soUpgrade glibc-langpack-hyUpgrade glibc-langpack-etUpgrade sysroot-aarch64-fc34-glibcUpgrade glibc-langpack-nbUpgrade glibc-langpack-bynUpgrade glibc-langpack-thUpgrade glibc-langpack-ru | Jun 3, 2025 | Nov 1, 2021 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Nov 4, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade glibcUpgrade glibc-all-langpacksUpgrade glibc-commonUpgrade nscdUpgrade libnslUpgrade glibc-locale-source | Feb 28, 2022 | Nov 4, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade glibc-headersUpgrade nscdUpgrade glibc-utilsUpgrade glibcUpgrade glibc-staticUpgrade glibc-commonUpgrade glibc-devel | Feb 24, 2022 | Nov 4, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade glibcUpgrade nscdUpgrade glibc-staticUpgrade glibc-headersUpgrade glibc-utilsUpgrade glibc-commonUpgrade glibc-devel | Mar 2, 2022 | Nov 4, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade glibc-commonUpgrade glibc-locale-sourceUpgrade nscdUpgrade libnslUpgrade glibc-debugutilsUpgrade glibcUpgrade glibc-all-langpacks | Jan 28, 2022 | Nov 4, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub