Summary
Charles Fol discovered that the GNU C Library iconv feature incorrectly
handled certain input sequences. An attacker could use this issue to cause
the GNU C Library to crash, resulting in a denial of service, or possibly
execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | glibc | 2.31-0ubuntu9.15 |
| Ubuntu · 22.04 LTS 22.04:LTS | glibc | 2.35-0ubuntu3.7 |
Vulnerabilities 1
-
High 7.3
The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to …
References
-
report
https://ubuntu.com/security/CVE-2024-2961