In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an internal state reset. This may affect data integrity in certain iconv() use cases. NOTE: the vendor states "the bug cannot be invoked through user input and requires iconv to be invoked with a NULL inbuf, which ought to require a separate application bug to do so unintentionally. Hence there's no security impact to the bug.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade glibc-langpack-guUpgrade nss_db-debuginfoUpgrade glibc-langpack-csbUpgrade glibc-langpack-enUpgrade glibc-langpack-sdUpgrade glibc-debuginfoUpgrade glibc-langpack-akUpgrade glibc-langpack-satUpgrade glibc-langpack-theUpgrade glibc-langpack-rwUpgrade glibc-langpack-bemUpgrade glibc-langpack-xhUpgrade glibc-langpack-waUpgrade glibc-langpack-seUpgrade glibc-langpack-szlUpgrade glibc-gconv-extra-debuginfoUpgrade glibc-langpack-brxUpgrade glibc-all-langpacksUpgrade glibc-langpack-mfeUpgrade glibc-langpack-mlUpgrade libnsl-debuginfoUpgrade compat-libpthread-nonsharedUpgrade glibc-langpack-aycUpgrade glibc-langpack-papUpgrade glibc-langpack-cmnUpgrade glibc-langpack-tlUpgrade glibc-langpack-gezUpgrade glibc-langpack-yuwUpgrade glibc-langpack-jaUpgrade glibc-langpack-loUpgrade glibc-langpack-kaUpgrade glibc-langpack-tpiUpgrade glibc-langpack-esUpgrade glibc-langpack-siUpgrade glibc-langpack-berUpgrade glibc-langpack-maiUpgrade glibc-langpack-skUpgrade glibc-langpack-stUpgrade glibc-langpack-zuUpgrade glibc-langpack-dzUpgrade glibc-langpack-ffUpgrade glibc-langpack-heUpgrade glibc-langpack-frUpgrade glibc-langpack-klUpgrade glibc-langpack-miUpgrade glibc-langpack-hneUpgrade glibc-develUpgrade glibc-langpack-sidUpgrade glibc-utilsUpgrade glibc-langpack-shsUpgrade glibc-langpack-csUpgrade glibc-langpack-niuUpgrade glibc-langpack-orUpgrade glibc-langpack-scUpgrade glibc-langpack-amUpgrade glibc-langpack-deUpgrade glibc-langpack-afUpgrade glibc-langpack-htUpgrade glibc-langpack-agrUpgrade glibc-nss-develUpgrade glibc-langpack-dsbUpgrade glibc-langpack-mnUpgrade glibc-benchtests-debuginfoUpgrade glibc-langpack-anUpgrade glibc-langpack-lnUpgrade glibc-langpack-mgUpgrade glibc-langpack-trUpgrade glibc-langpack-shnUpgrade glibc-langpack-tigUpgrade glibc-langpack-zhUpgrade glibc-gconv-extraUpgrade glibc-langpack-nnUpgrade glibc-langpack-paUpgrade glibc-langpack-miqUpgrade glibc-langpack-saUpgrade glibc-langpack-veUpgrade glibc-langpack-koUpgrade glibc-langpack-teUpgrade glibc-langpack-arUpgrade glibc-langpack-ttUpgrade glibc-langpack-asUpgrade glibc-langpack-swUpgrade glibc-langpack-iaUpgrade glibc-langpack-isUpgrade glibc-langpack-urUpgrade glibc-langpack-psUpgrade glibc-langpack-yoUpgrade glibc-langpack-igUpgrade glibc-staticUpgrade glibc-langpack-ckbUpgrade glibc-langpack-idUpgrade glibc-langpack-nanUpgrade glibc-langpack-tnUpgrade glibc-docUpgrade glibc-langpack-anpUpgrade glibc-langpack-filUpgrade glibc-langpack-mrUpgrade glibc-langpack-kokUpgrade glibc-langpack-nrUpgrade glibc-langpack-lgUpgrade glibc-langpack-cvUpgrade glibc-langpack-kkUpgrade glibc-langpack-kwUpgrade glibc-langpack-caUpgrade glibc-langpack-iuUpgrade glibc-langpack-daUpgrade glibc-langpack-bsUpgrade glibcUpgrade sysroot-x86_64-fc34-glibcUpgrade glibc-langpack-hiUpgrade glibc-langpack-neUpgrade glibc-langpack-mniUpgrade glibc-langpack-taUpgrade glibc-langpack-svUpgrade glibc-langpack-ocUpgrade glibc-langpack-bynUpgrade glibc-langpack-kyUpgrade glibc-langpack-ikUpgrade glibc-langpack-yueUpgrade glibc-langpack-rajUpgrade glibc-langpack-slUpgrade glibc-langpack-mkUpgrade glibc-langpack-roUpgrade glibc-langpack-osUpgrade glibc-langpack-magUpgrade glibc-langpack-biUpgrade glibc-langpack-liUpgrade glibc-langpack-fiUpgrade glibc-langpack-furUpgrade glibc-langpack-bnUpgrade glibc-langpack-euUpgrade glibc-langpack-aaUpgrade nss_hesiod-debuginfoUpgrade glibc-langpack-foUpgrade sysroot-aarch64-fc34-glibcUpgrade glibc-langpack-hifUpgrade glibc-commonUpgrade glibc-langpack-dvUpgrade glibc-langpack-toUpgrade glibc-langpack-ndsUpgrade glibc-langpack-plUpgrade glibc-langpack-bhoUpgrade glibc-langpack-ruUpgrade nscdUpgrade glibc-langpack-kabUpgrade glibc-utils-debuginfoUpgrade glibc-langpack-omUpgrade glibc-langpack-unmUpgrade glibc-langpack-faUpgrade glibc-langpack-nhnUpgrade glibc-langpack-hsbUpgrade libnslUpgrade glibc-langpack-lzhUpgrade glibc-langpack-bgUpgrade glibc-langpack-azUpgrade glibc-langpack-uzUpgrade glibc-langpack-msUpgrade glibc-langpack-huUpgrade glibc-langpack-brUpgrade glibc-headers-x86Upgrade nss_dbUpgrade glibc-langpack-ugUpgrade glibc-benchtestsUpgrade glibc-langpack-woUpgrade glibc-langpack-waeUpgrade glibc-langpack-ukUpgrade glibc-langpack-tkUpgrade glibc-langpack-tiUpgrade glibc-langpack-sahUpgrade glibc-langpack-mjwUpgrade glibc-debugsourceUpgrade glibc-langpack-mhrUpgrade glibc-langpack-sqUpgrade glibc-langpack-walUpgrade glibc-langpack-boUpgrade nscd-debuginfoUpgrade glibc-minimal-langpackUpgrade glibc-langpack-elUpgrade glibc-langpack-hrUpgrade glibc-langpack-ltUpgrade glibc-langpack-gvUpgrade glibc-langpack-chrUpgrade glibc-langpack-tcyUpgrade glibc-langpack-mnwUpgrade glibc-langpack-thUpgrade glibc-langpack-cyUpgrade glibc-langpack-fyUpgrade glibc-langpack-ksUpgrade glibc-langpack-sgsUpgrade glibc-langpack-yiUpgrade glibc-langpack-kmUpgrade glibc-common-debuginfoUpgrade glibc-langpack-tsUpgrade glibc-langpack-quzUpgrade glibc-langpack-myUpgrade glibc-langpack-lbUpgrade glibc-langpack-haUpgrade glibc-langpack-eoUpgrade glibc-langpack-ceUpgrade glibc-langpack-doiUpgrade nss_hesiodUpgrade glibc-langpack-tgUpgrade glibc-langpack-nsoUpgrade glibc-langpack-hakUpgrade glibc-langpack-kuUpgrade glibc-langpack-itUpgrade glibc-langpack-glUpgrade glibc-langpack-ssUpgrade glibc-langpack-smUpgrade glibc-langpack-mtUpgrade glibc-langpack-lvUpgrade glibc-langpack-ptUpgrade glibc-langpack-lijUpgrade glibc-langpack-gaUpgrade glibc-langpack-gdUpgrade glibc-langpack-crhUpgrade glibc-langpack-bhbUpgrade glibc-langpack-beUpgrade glibc-locale-sourceUpgrade glibc-langpack-srUpgrade glibc-langpack-soUpgrade glibc-langpack-hyUpgrade glibc-langpack-viUpgrade glibc-langpack-astUpgrade glibc-langpack-knUpgrade glibc-langpack-etUpgrade glibc-langpack-nbUpgrade glibc-langpack-nl | Jun 3, 2025 | Nov 1, 2021 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Nov 4, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade glibcUpgrade glibc-all-langpacksUpgrade glibc-locale-sourceUpgrade nscdUpgrade glibc-commonUpgrade libnsl | Feb 28, 2022 | Nov 4, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade glibc-utilsUpgrade glibc-staticUpgrade glibc-headersUpgrade nscdUpgrade glibcUpgrade glibc-commonUpgrade glibc-devel | Feb 24, 2022 | Nov 4, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade glibc-utilsUpgrade glibc-develUpgrade glibc-commonUpgrade nscdUpgrade glibcUpgrade glibc-headersUpgrade glibc-static | Mar 2, 2022 | Nov 4, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade glibc-all-langpacksUpgrade glibc-locale-sourceUpgrade glibc-debugutilsUpgrade glibc-commonUpgrade nscdUpgrade libnslUpgrade glibc | Jan 28, 2022 | Nov 4, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub