Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-10228

Опубликовано: 02 мар. 2017
Источник: nvd
CVSS3: 5.9
CVSS2: 4.3
EPSS Низкий

Описание

The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*
Версия до 2.25 (включая)

EPSS

Процентиль: 70%
0.00644
Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 5.9
ubuntu
больше 8 лет назад

The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.

CVSS3: 3.3
redhat
больше 8 лет назад

The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.

CVSS3: 5.9
debian
больше 8 лет назад

The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and e ...

suse-cvrf
больше 3 лет назад

Security update for glibc

suse-cvrf
больше 3 лет назад

Security update for glibc

EPSS

Процентиль: 70%
0.00644
Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-20