CVE-2019-25013
Medium
Description
The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read.
SeverityMedium
CVSS5.9
Exploit probability—
Product
Gnu Glibc
PublishedJan 4, 2021
First seenJan 4, 2021
Weakness typeCWE-125Out-of-bounds read
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gnu glibc | v ≤ 2.32 | — |
| fedoraproject fedora | 32, 33 | — |
| netapp ontap_select_deploy_administration_utility | No range specified | — |
| netapp service_processor | No range specified | — |
| broadcom fabric_operating_system | No range specified | — |
| netapp a250_firmware | No range specified | — |
| netapp 500f_firmware | No range specified | — |
| debian debian_linux | 10.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.