CVE-2019-25013
בינונית 5.9
תיאור (מקור, אנגלית)
The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read.
מדדים
- CVSS 3.1
-
5.9 (MEDIUM)
מקור הציון: NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS — סבירות ניצול
- 4% (אחוזון 100) נכון ל-18/10/2026
- CWE
- CWE-125
מוצרים מושפעים
gnu: glibc; fedoraproject: fedora; netapp: ontap select deploy administration utility; netapp: service processor; broadcom: fabric operating system; netapp: a250 firmware; netapp: a250; netapp: 500f firmware; netapp: 500f; debian: debian linux
קישורים
- https://sourceware.org/bugzilla/show_bug.cgi?id=24973 Issue TrackingPatchThird Party Advisory
- https://sourceware.org/bugzilla/show_bug.cgi?id=24973 Issue TrackingPatchThird Party Advisory
- https://lists.apache.org/thread.html/r32d767ac804e9b8aad4355bb85960a6a1385eab7…
- https://lists.apache.org/thread.html/r448bb851cc8e6e3f93f3c28c70032b37062625d8…
- https://lists.apache.org/thread.html/r4806a391091e082bdea17266452ca656ebc176e5…
- https://lists.apache.org/thread.html/r499e4f96d0b5109ef083f2feccd33c51650c1b7d…
- https://lists.apache.org/thread.html/r5af4430421bb6f9973294691a7904bbd260937e9…
- https://lists.apache.org/thread.html/r750eee18542bc02bd8350861c424ee60a9b9b225…
- https://lists.apache.org/thread.html/r7a2e94adfe0a2f0a1d42e4927e8c32ecac97d37d…
- https://lists.apache.org/thread.html/rd2354f9ccce41e494fbadcbc5ad87218de6ec0ff…