CVE-2021-3326

glibc: Assertion failure in ISO-2022-JP-3 gconv module related to combining characters

Published Jan 27, 2021 CVSS 3.1 · 7.5 High EPSS 3.8% KEV · Not listed
Description
The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-3152-1 glibc security update
EUVD EUVD EUVD-2021-26657 The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.
Ubuntu USN Ubuntu USN USN-5310-1 GNU C Library vulnerabilities
Ubuntu USN Ubuntu USN USN-5699-1 GNU C Library vulnerabilities
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00097}

epss

{'score': 0.00093}

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}