Orta CVSS 5.9
CVE-2016-10228: Glibc: hatalı girdi doğrulama
Açıklama (NVD)
The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.
Özet bilgiler
- Ürün
- Gnu Glibc
- CVSS v3.1
- 5.9
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %4,11 (yüzdelik 91)
- CWE
- CWE-20
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| gnu-glibc | — | 2.25 | — |
Kaynaklar
- NVD kaydı
- openwall.com
- www.securityfocus.com
- lists.apache.org
- lists.debian.org
- security.gentoo.org
- sourceware.org
- sourceware.org
- sourceware.org
- www.oracle.com
- openwall.com
- www.securityfocus.com
- lists.apache.org
- lists.debian.org
- security.gentoo.org
- sourceware.org
- sourceware.org
- sourceware.org
- www.oracle.com
- cert-portal.siemens.com
- cert-portal.siemens.com
- CWE-20