CVE-2021-3326

Katalog CVE

CVSS 7.5 · High EPSS 3,1%

Kerentanan Reachable Assertion pada gnu glibc, netapp e-series santricity os controller +9 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.

Rincian

Terbit di NVD

27 Januari 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-617: Reachable Assertion

EPSS (30 hari)

3,1% peluang dieksploitasi; lebih tinggi dari 87,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.oracle.com/security-alerts/cpujan2022.html patch · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/01/28/2 mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html mailing list · advisory pihak ketiga
• https://security.gentoo.org/glsa/202107-07 advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20210304-0007/ advisory pihak ketiga
• https://sourceware.org/bugzilla/show_bug.cgi?id=27256 issue tracking · advisory pihak ketiga
• https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=7d88c6142c6efc160c0ee5e4f85cde382c072888
• https://www.oracle.com/security-alerts/cpuapr2022.html not applicable