ISOMAN

CVE

CVE-2012-6656

iconvdata/ibm930.c in GNU C Library (aka glibc) before 2.16 allows context-dependent attackers to cause a denial of service (out-of-bounds read) via a multibyte character value of "0xffff" to the iconv function when converting IBM930 encoded data to UTF-8.

Severity
MEDIUM
CVSS
5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://www.debian.org/security/2015/dsa-3142
  2. http://www.mandriva.com/security/advisories?name=MDVSA-2014:175
  3. http://www.openwall.com/lists/oss-security/2014/08/29/3
  4. http://www.openwall.com/lists/oss-security/2014/09/02/1
  5. http://www.securityfocus.com/bid/69472
  6. http://www.ubuntu.com/usn/USN-2432-1
  7. https://security.gentoo.org/glsa/201503-04
  8. https://sourceware.org/bugzilla/show_bug.cgi?id=14134
  9. https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=6e230d11837f3ae7b375ea69d7905f0d18eb79e5
  10. http://www.debian.org/security/2015/dsa-3142
  11. http://www.mandriva.com/security/advisories?name=MDVSA-2014:175
  12. http://www.openwall.com/lists/oss-security/2014/08/29/3
  13. http://www.openwall.com/lists/oss-security/2014/09/02/1
  14. http://www.securityfocus.com/bid/69472
  15. http://www.ubuntu.com/usn/USN-2432-1
  16. https://security.gentoo.org/glsa/201503-04
  17. https://sourceware.org/bugzilla/show_bug.cgi?id=14134
  18. https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=6e230d11837f3ae7b375ea69d7905f0d18eb79e5