← Back

CVE-2020-29562

nvd nist
Published: Dec 4, 2020Modified: Oct 14, 2026

JSON object

Loading...
4.8
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H
Exploitability: 1.2 / Impact: 3.6
Source: NVD

Description

The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.

Affected (3)

Gnu
1 product
Glibc
Fedoraproject
1 product
Fedora
Netapp
1 product
E Series Santricity Os Controller
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Glibc
2.30 ≤ version ≤ 2.32
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Fedora
Version 32
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
E Series Santricity Os Controller
11.0.0 ≤ version ≤ 11.60.3

Related CWEs

CWE-617
Reachable Assertion
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References (12)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
ExploitIssue TrackingPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitIssue TrackingPatchThird Party Advisory
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.