This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-3326 →

DEBIAN-CVE-2021-3326

The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding,...

Original description

The description as published by the source.

The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 glibc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31-10"}]}]

Debian:13 glibc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31-10"}]}]

Debian:14 glibc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31-10"}]}]

References

advisory security-tracker.debian.org