This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2016-10228 →

DEBIAN-CVE-2016-10228

The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLA...

Original description

The description as published by the source.

The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 glibc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31-3"}]}]

Debian:13 glibc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31-3"}]}]

Debian:14 glibc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31-3"}]}]

References

advisory security-tracker.debian.org