High · published January 28, 2021
The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.
| Product | Versions | Fixed in |
|---|---|---|
| gnu/glibc | ≤ 2.32.0 | — |
| netapp/e-series_santricity_os_controller | ≥ 11.0, ≤ 11.60.3 | — |
| netapp/ontap_select_deploy_administration_utility | all versions | — |
| oracle/communications_cloud_native_core_security_edge_protection_proxy | all versions | — |
| fujitsu/m10-1_firmware | < xcp2410 | xcp2410 |
| fujitsu/m10-4_firmware | < xcp2410 | xcp2410 |
| fujitsu/m10-4s_firmware | < xcp2410 | xcp2410 |
| fujitsu/m12-1_firmware | < xcp2410 | xcp2410 |
| fujitsu/m12-2_firmware | < xcp2410 | xcp2410 |
| fujitsu/m12-2_firmware | < xcp2410 | xcp2410 |
| fujitsu/m12-2s_firmware | < xcp2410 | xcp2410 |
| fujitsu/m10-1_firmware | < xcp3110 | xcp3110 |
| fujitsu/m10-4_firmware | < xcp3110 | xcp3110 |
| fujitsu/m10-4s_firmware | < xcp3110 | xcp3110 |
| fujitsu/m12-1_firmware | < xcp3110 | xcp3110 |
| fujitsu/m12-2_firmware | < xcp3110 | xcp3110 |
| fujitsu/m12-2_firmware | < xcp3110 | xcp3110 |
| fujitsu/m12-2s_firmware | < xcp3110 | xcp3110 |
| debian/debian_linux | all versions | — |