GNU glibc 2.34
Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:glibc:2.34:*:*:*:*:*:*:*
part: a version: 2.34 update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Glibc (b8610c0d-6ad8-566c-b276-03b23ae99324) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/glibc |
purl2cpe | 2026-06-01 10:11:53.554294 |
pkg:github/bminor/glibc |
purl2cpe | 2026-06-01 10:11:53.554295 |
pkg:github/lattera/glibc |
purl2cpe | 2026-06-01 10:11:53.554296 |
pkg:gnu/glibc |
purl2cpe | 2026-06-01 10:11:53.554298 |
pkg:rpm/fedora/glibc |
purl2cpe | 2026-06-01 10:11:53.554299 |
pkg:rpm/opensuse/glibc |
purl2cpe | 2026-06-01 10:11:53.554300 |
pkg:sourceware/glibc |
purl2cpe | 2026-06-01 10:11:53.554302 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-43396 |
vulnerable | 2026-06-08 05:36:43.341117 |
Details available
In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an internal state reset. This may affect data integrity in certain iconv() use cases. NOTE: the vendor states "the bug cannot be invoked through user input and requires iconv to be invoked with a NULL inbuf, which ought to require a separate application bug to do so unintentionally. Hence there's no security impact to the bug.
Published: 2021-11-04T19:52:49.000Z
Updated: 2024-08-04T03:55:28.498Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.