| Package | Affected versions | Patched versions |
|---|---|---|
| glibc | ≥ 2.1.93, < 2.40 | 2.40 |
The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free