Wind River Support Network

HomeDefectsLIN1019-5621
Fixed

LIN1019-5621 : Security Advisory - glibc - CVE-2020-27618

Created: Nov 5, 2020    Updated: Mar 5, 2021
Resolved Date: Mar 5, 2021
Found In Version: 10.19.45.1
Severity: Standard
Applicable for: Wind River Linux LTS 19
Component/s: Userspace

Description

The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, IBM1399 encodings, fails to advance the input state, which could lead to an infinite loop in applications, resulting in a denial of service

[https://sourceware.org/bugzilla/show_bug.cgi?id=26224]

CREATE(Triage):(User=admin) [CVE-2020-27618|https://nvd.nist.gov/vuln/detail/CVE-2020-27618]

CVEs


Live chat
Online