VDB

DEBIAN-CVE-2016-10228

DEBIAN-CVE-2016-10228 PUBLISHED CVSS 5.900000095367432 MEDIUM

The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.

Risk Scores

CVSS v3.0
5.900000095367432
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Debian:14glibc0, 0, 0
Debian:11glibc0, 0, 0
Debian:12glibc0, 0, 0
Debian:13glibc0, 0, 0

Timeline

  • Mar 2, 2017 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›