This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2020-29562 →

DEBIAN-CVE-2020-29562

The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an as...

Original description

The description as published by the source.

The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 glibc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31-7"}]}]

Debian:13 glibc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31-7"}]}]

Debian:14 glibc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31-7"}]}]

References

advisory security-tracker.debian.org