VDB

GCVE-110-MAGEIA-2021-150

GCVE-110-MAGEIA-2021-150
Advisory Published
Vulnetix · Advisory published March 21, 2021
Updated glibc packages fix a security vulnerabilities: The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance the input state, which could lead to an infinite loop in applications, resulting in a denial of service (CVE-2020-27618). The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service (CVE-2021-3326). The nameserver caching daemon (nscd), when processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in degraded service or Denial of Service on the local system (CVE-2021-27645).

Affected Products

VendorProductVersionsPlatforms
Mageiaglibc0 (affected), 2.29-22.mga7 (unaffected), 0 (affected), 2.29-22.mga7 (unaffected)
Mageiamesa0 (affected), 21.1.4-1.mga8 (unaffected)
Mageialibdrm0 (affected), 2.4.107-1.mga8 (unaffected)

Browse GCVE Records

72,664 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›