The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.

The remote NewStart CGSL host, running version MAIN 6.06, has glibc packages installed that are affected by multiple vulnerabilities:

  - The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It     may use the notification thread attributes object (passed through its struct sigevent parameter) after it     has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified     other impact. (CVE-2021-33574)

  - elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH     containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which allows local users to gain     privileges via a Trojan horse library in the current working directory, related to the fillin_rpath and     decompose_rpath functions. This is associated with misinterpretion of an empty RPATH/RUNPATH token as the     ./ directory. NOTE: this configuration of RPATH/RUNPATH for a privileged program is apparently very     uncommon; most likely, no such program is shipped with any common Linux distribution. (CVE-2017-16997)

  - The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple     suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite     loop when processing invalid multi-byte input sequences, leading to a denial of service. (CVE-2016-10228)

  - The idna_to_ascii_4i function in lib/idna.c in libidn before 1.33 allows context-dependent attackers to     cause a denial of service (out-of-bounds read and crash) via 64 bytes of input. (CVE-2016-6261)

  - The stringprep_utf8_nfkc_normalize function in lib/nfkc.c in libidn before 1.33 allows context-dependent     attackers to cause a denial of service (out-of-bounds read and crash) via crafted UTF-8 data.
    (CVE-2016-6263)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple     suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite     loop when processing invalid multi-byte input sequences, leading to a denial of service. (CVE-2016-10228)

Note that Nessus relies on the presence of the package as reported by the vendor.

The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:1585 advisory.

  - The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple     suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite     loop when processing invalid multi-byte input sequences, leading to a denial of service. (CVE-2016-10228)

  - The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-     byte input sequences in the EUC-KR encoding, may have a buffer over-read. (CVE-2019-25013)

  - In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-     based buffer over-read via an attempted case-insensitive regular-expression match. (CVE-2019-9169)

  - The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid     multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance     the input state, which could lead to an infinite loop in applications, resulting in a denial of service, a     different vulnerability from CVE-2016-10228. (CVE-2020-27618)

  - The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid     input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program,     potentially resulting in a denial of service. (CVE-2021-3326)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5768-1 advisory.

    Jan Engelhardt, Tavis Ormandy, and others discovered that the GNU C Library iconv feature incorrectly     handled certain input sequences. An attacker could possibly use this issue to cause the GNU C Library to     hang or crash, resulting in a denial of service.

    (CVE-2016-10228, CVE-2019-25013, CVE-2020-27618)

    It was discovered that the GNU C Library did not properly handled DNS responses when ENDS0 is enabled. An     attacker could possibly use this issue to cause fragmentation-based attacks. (CVE-2017-12132)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has glibc packages installed that are affected by multiple vulnerabilities:

  - The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple     suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite     loop when processing invalid multi-byte input sequences, leading to a denial of service. (CVE-2016-10228)

  - The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-     byte input sequences in the EUC-KR encoding, may have a buffer over-read. (CVE-2019-25013)

  - The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid     multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance     the input state, which could lead to an infinite loop in applications, resulting in a denial of service, a     different vulnerability from CVE-2016-10228. (CVE-2020-27618)

  - The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when     processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in     degraded service or Denial of Service on the local system. This is related to netgroupcache.c.
    (CVE-2021-27645)

  - The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid     input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program,     potentially resulting in a denial of service. (CVE-2021-3326)

  - The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It     may use the notification thread attributes object (passed through its struct sigevent parameter) after it     has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified     other impact. (CVE-2021-33574)

  - A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory     corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and     size passed to getcwd() in a setuid program could use this flaw to potentially execute arbitrary code and     escalate their privileges on the system. (CVE-2021-3999)

  - The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc)     through 2.34 copies its path argument on the stack without validating its length, which may result in a     buffer overflow, potentially resulting in a denial of service or (if an application is not built with a     stack protector enabled) arbitrary code execution. (CVE-2022-23218)

  - The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc)     through 2.34 copies its hostname argument on the stack without validating its length, which may result in     a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a     stack protector enabled) arbitrary code execution. (CVE-2022-23219)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3152 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3152-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Helmut Grohne     October 17, 2022                              https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : glibc     Version        : 2.28-10+deb10u2     CVE ID         : CVE-2016-10228 CVE-2019-19126 CVE-2019-25013                      CVE-2020-1752 CVE-2020-6096 CVE-2020-10029                      CVE-2020-27618 CVE-2021-3326 CVE-2021-3999                      CVE-2021-27645 CVE-2021-33574 CVE-2021-35942                      CVE-2022-23218 CVE-2022-23219     Debian Bug     : 856503 945250 953108 953788 961452 973914 979273 981198                      983479 989147 990542

    This update fixes a wide range of vulnerabilities. A significant portion     affects character set conversion.

    CVE-2016-10228

        The iconv program in the GNU C Library when invoked with multiple         suffixes in the destination encoding (TRANSLATE or IGNORE) along with         the -c option, enters an infinite loop when processing invalid         multi-byte input sequences, leading to a denial of service.

    CVE-2019-19126

        On the x86-64 architecture, the GNU C Library fails to ignore the         LD_PREFER_MAP_32BIT_EXEC environment variable during program         execution after a security transition, allowing local attackers to         restrict the possible mapping addresses for loaded libraries and         thus bypass ASLR for a setuid program.

    CVE-2019-25013

        The iconv feature in the GNU C Library, when processing invalid         multi-byte input sequences in the EUC-KR encoding, may have a buffer         over-read.

    CVE-2020-10029

        The GNU C Library could overflow an on-stack buffer during range         reduction if an input to an 80-bit long double function contains a         non-canonical bit pattern, a seen when passing a         0x5d414141414141410000 value to sinl on x86 targets. This is related         to sysdeps/ieee754/ldbl-96/e_rem_pio2l.c.

    CVE-2020-1752

        A use-after-free vulnerability introduced in glibc was found in the         way the tilde expansion was carried out. Directory paths containing         an initial tilde followed by a valid username were affected by this         issue. A local attacker could exploit this flaw by creating a         specially crafted path that, when processed by the glob function,         would potentially lead to arbitrary code execution.

    CVE-2020-27618

        The iconv function in the GNU C Library, when processing invalid         multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390,         and IBM1399 encodings, fails to advance the input state, which could         lead to an infinite loop in applications, resulting in a denial of         service, a different vulnerability from CVE-2016-10228.

    CVE-2020-6096

        An exploitable signed comparison vulnerability exists in the ARMv7         memcpy() implementation of GNU glibc. Calling memcpy() (on ARMv7         targets that utilize the GNU glibc implementation) with a negative         value for the 'num' parameter results in a signed comparison         vulnerability. If an attacker underflows the 'num' parameter to         memcpy(), this vulnerability could lead to undefined behavior such as         writing to out-of-bounds memory and potentially remote code         execution.  Furthermore, this memcpy() implementation allows for         program execution to continue in scenarios where a segmentation fault         or crash should have occurred. The dangers occur in that subsequent         execution and iterations of this code will be executed with this         corrupted data.

    CVE-2021-27645

        The nameserver caching daemon (nscd) in the GNU C Library, when         processing a request for netgroup lookup, may crash due to a         double-free, potentially resulting in degraded service or Denial of         Service on the local system. This is related to netgroupcache.c.

    CVE-2021-3326

        The iconv function in the GNU C Library, when processing invalid         input sequences in the ISO-2022-JP-3 encoding, fails an assertion in         the code path and aborts the program, potentially resulting in a         denial of service.

    CVE-2021-33574

        The mq_notify function in the GNU C Library has a use-after-free. It         may use the notification thread attributes object (passed through         its struct sigevent parameter) after it has been freed by the caller,         leading to a denial of service (application crash) or possibly         unspecified other impact.

    CVE-2021-35942

        The wordexp function in the GNU C Library may crash or read arbitrary         memory in parse_param (in posix/wordexp.c) when called with an         untrusted, crafted pattern, potentially resulting in a denial of         service or disclosure of information. This occurs because atoi was         used but strtoul should have been used to ensure correct calculations.

    CVE-2021-3999

        An off-by-one buffer overflow and underflow in getcwd() may lead to         memory corruption when the size of the buffer is exactly 1. A local         attacker who can control the input buffer and size passed to getcwd()         in a setuid program could use this flaw to potentially execute         arbitrary code and escalate their privileges on the system.

    CVE-2022-23218

        The deprecated compatibility function svcunix_create in the sunrpc         module of the GNU C Library copies its path argument on the stack         without validating its length, which may result in a buffer overflow,         potentially resulting in a denial of service or (if an application         is not built with a stack protector enabled) arbitrary code execution.

    CVE-2022-23219

        The deprecated compatibility function clnt_create in the sunrpc module         of the GNU C Library copies its hostname argument on the stack without         validating its length, which may result in a buffer overflow,         potentially resulting in a denial of service or (if an application is         not built with a stack protector enabled) arbitrary code execution.


    For Debian 10 buster, these problems have been fixed in version     2.28-10+deb10u2.

    We recommend that you upgrade your glibc packages.

    For the detailed security status of glibc please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/glibc

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2886-1 advisory.

  - res_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service (NULL     pointer dereference and process crash). (CVE-2015-5180)

  - The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple     suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite     loop when processing invalid multi-byte input sequences, leading to a denial of service. (CVE-2016-10228)

  - The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-     byte input sequences in the EUC-KR encoding, may have a buffer over-read. (CVE-2019-25013)

  - The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid     multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance     the input state, which could lead to an infinite loop in applications, resulting in a denial of service, a     different vulnerability from CVE-2016-10228. (CVE-2020-27618)

  - The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text     containing an irreversible character, fails an assertion in the code path and aborts the program,     potentially resulting in a denial of service. (CVE-2020-29562)

  - sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-     based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with     a non-canonical bit pattern, as seen when passing a \x00\x04\x00\x00\x00\x00\x00\x00\x00\x04 value to     sprintf. NOTE: the issue does not affect glibc by default in 2016 or later (i.e., 2.23 or later) because     of commits made in 2015 for inlining of C99 math functions through use of GCC built-ins. In other words,     the reference to 2.23 is intentional despite the mention of Fixed for glibc 2.33 in the 26649 reference.
    (CVE-2020-29573)

  - The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid     input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program,     potentially resulting in a denial of service. (CVE-2021-3326)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5310-1 advisory.

    Jan Engelhardt, Tavis Ormandy, and others discovered that the GNU C Library iconv feature incorrectly     handled certain input sequences. An attacker could possibly use this issue to cause the GNU C Library to     hang or crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS and Ubuntu     20.04 LTS. (CVE-2016-10228, CVE-2019-25013, CVE-2020-27618, CVE-2020-29562, CVE-2021-3326)

    Jason Royes and Samuel Dytrych discovered that the GNU C Library incorrectly handled signed comparisons on     ARMv7 targets. A remote attacker could use this issue to cause the GNU C Library to crash, resulting in a     denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and     Ubuntu 20.04 LTS. (CVE-2020-6096)

    It was discovered that the GNU C Library nscd daemon incorrectly handled certain netgroup lookups. An     attacker could possibly use this issue to cause the GNU C Library to crash, resulting in a denial of     service. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-27645)

    It was discovered that the GNU C Library wordexp function incorrectly handled certain patterns. An     attacker could use this issue to cause the GNU C Library to crash, resulting in a denial of service, or     possibly obtain sensitive information. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
    (CVE-2021-35942)

    It was discovered that the GNU C Library realpath function incorrectly handled return values. An attacker     could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 21.10.
    (CVE-2021-3998)

    It was discovered that the GNU C library getcwd function incorrectly handled buffers. An attacker could     use this issue to cause the GNU C Library to crash, resulting in a denial of service, or possibly execute     arbitrary code. (CVE-2021-3999)

    It was discovered that the GNU C Library sunrpc module incorrectly handled buffer lengths. An attacker     could possibly use this issue to cause the GNU C Library to crash, resulting in a denial of service.
    (CVE-2022-23218, CVE-2022-23219)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:1585 advisory.

  - The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple     suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite     loop when processing invalid multi-byte input sequences, leading to a denial of service. (CVE-2016-10228)

  - In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-     based buffer over-read via an attempted case-insensitive regular-expression match. (CVE-2019-9169)

  - The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-     byte input sequences in the EUC-KR encoding, may have a buffer over-read. (CVE-2019-25013)

  - The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid     multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance     the input state, which could lead to an infinite loop in applications, resulting in a denial of service, a     different vulnerability from CVE-2016-10228. (CVE-2020-27618)

  - The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid     input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program,     potentially resulting in a denial of service. (CVE-2021-3326)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3830-1 advisory.

  - The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple     suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite     loop when processing invalid multi-byte input sequences, leading to a denial of service. (CVE-2016-10228)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9344 advisory.

  - The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple     suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite     loop when processing invalid multi-byte input sequences, leading to a denial of service. (CVE-2016-10228)

  - In the GNU C Library (aka glibc or libc6) through 2.29, proceed_next_node in posix/regexec.c has a heap-     based buffer over-read via an attempted case-insensitive regular-expression match. (CVE-2019-9169)

  - The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid     multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance     the input state, which could lead to an infinite loop in applications, resulting in a denial of service, a     different vulnerability from CVE-2016-10228. (CVE-2020-27618)

  - The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid     input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program,     potentially resulting in a denial of service. (CVE-2021-3326)

  - The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-     byte input sequences in the EUC-KR encoding, may have a buffer over-read. (CVE-2019-25013)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9280 advisory.

    - CVE-2019-9169: Fix buffer overread in regexec.c (#1685400).
    - CVE-2021-3326: iconv assertion failure in ISO-2022-JP-3 decoding (#1924919)
    - CVE-2019-25013:Fix buffer overrun in EUC-KR conversion module (#1912544)
    - CVE-2016-10228, CVE-2020-27618: Fix infinite loops in iconv (#1704868,

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3 / 17.5.1.1. It is, therefore, affected by a vulnerability as referenced in the K52494142 advisory.

    The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple     suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite     loop when processing invalid multi-byte input sequences, leading to a denial of service.(CVE-2016-10228)

Tenable has extracted the preceding description block directly from the F5 Networks BIG-IP security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED12 / SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2480-1 advisory.

  - The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple     suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite     loop when processing invalid multi-byte input sequences, leading to a denial of service. (CVE-2016-10228)

  - The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in     parse_param (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially resulting in     a denial of service or disclosure of information. This occurs because atoi was used but strtoul should     have been used to ensure correct calculations. (CVE-2021-35942)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the version of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The iconv program in the GNU C Library (aka glibc or     libc6) 2.31 and earlier, when invoked with multiple     suffixes in the destination encoding (TRANSLATE or     IGNORE) along with the -c option, enters an infinite     loop when processing invalid multi-byte input     sequences, leading to a denial of     service.(CVE-2016-10228)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - The iconv program in the GNU C Library (aka glibc or     libc6) 2.25 and earlier, when invoked with the -c     option, enters an infinite loop when processing invalid     multi-byte input sequences, leading to a denial of     service.(CVE-2016-10228)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1585 advisory.

  - glibc: iconv program can hang when invoked with the -c option (CVE-2016-10228)

  - glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding     (CVE-2019-25013)

  - glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-     read (CVE-2019-9169)

  - glibc: iconv when processing invalid multi-byte input sequences fails to advance the input state, which     could result in an infinite loop (CVE-2020-27618)

  - glibc: Assertion failure in ISO-2022-JP-3 gconv module related to combining characters (CVE-2021-3326)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1585 advisory.

    - CVE-2019-9169: Fix buffer overread in regexec.c (#1685400).
    - CVE-2021-3326: iconv assertion failure in ISO-2022-JP-3 decoding (#1924919)
    - CVE-2019-25013:Fix buffer overrun in EUC-KR conversion module (#1912544)
    - CVE-2016-10228, CVE-2020-27618: Fix infinite loops in iconv (#1704868,

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1585 advisory.

    The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard     math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system.
    Without these libraries, the Linux system cannot function correctly.

    Security Fix(es):

    * glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR     encoding (CVE-2019-25013)

    * glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer     over-read (CVE-2019-9169)

    * glibc: assertion failure in ISO-2022-JP-3 gconv module related to combining characters (CVE-2021-3326)

    * glibc: iconv program can hang when invoked with the -c option (CVE-2016-10228)

    * glibc: iconv when processing invalid multi-byte input sequences fails to advance the input state, which     could result in an infinite loop (CVE-2020-27618)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of glibc installed on the remote host is prior to 2.26-41. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1605 advisory.

    The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple     suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite     loop when processing invalid multi-byte input sequences, leading to a denial of service. (CVE-2016-10228)

    A flaw was found in glibc. When processing input in the EUC-KR encoding, an invalid input sequence could     cause glibc to read beyond the end of a buffer, resulting in a segmentation fault. The highest threat from     this vulnerability is to system availability. (CVE-2019-25013)

    A denial of service flaw was found in the way glibc's iconv function handled UCS4 text containing an     irreversible character. This flaw causes an application compiled with glibc and using the vulnerable     function to terminate with an assertion, resulting in a denial of service. The highest threat from this     vulnerability is to system availability. (CVE-2020-29562)

    A signed comparison vulnerability was found in GNU libc in the ARMv7 implementation of memcpy(). The flaw     affects the third argument to memcpy() that specifies the number of bytes to copy. An underflow on the     third argument could lead to undefined behavior such as out-of-bounds memory write and potentially remote     code execution. (CVE-2020-6096)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202101-20 (glibc: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in glibc. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-6e581c051a advisory.

  - The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple     suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite     loop when processing invalid multi-byte input sequences, leading to a denial of service. (CVE-2016-10228)

  - The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-     byte input sequences in the EUC-KR encoding, may have a buffer over-read. (CVE-2019-25013)

  - An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc     2.30.9000. Calling memcpy() (on ARMv7 targets that utilize the GNU glibc implementation) with a negative     value for the 'num' parameter results in a signed comparison vulnerability. If an attacker underflows the     'num' parameter to memcpy(), this vulnerability could lead to undefined behavior such as writing to out-     of-bounds memory and potentially remote code execution. Furthermore, this memcpy() implementation allows     for program execution to continue in scenarios where a segmentation fault or crash should have occurred.
    The dangers occur in that subsequent execution and iterations of this code will be executed with this     corrupted data. (CVE-2020-6096)

  - The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text     containing an irreversible character, fails an assertion in the code path and aborts the program,     potentially resulting in a denial of service. (CVE-2020-29562)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Stack-based buffer overflow in the clntudp_call     function in sunrpc/clnt_udp.c in the GNU C Library (aka     glibc or libc6) allows remote servers to cause a denial     of service (crash) or possibly unspecified other impact     via a flood of crafted ICMP and UDP     packets.(CVE-2016-4429)

  - Integer overflow in the strxfrm function in the GNU C     Library (aka glibc or libc6) before 2.21 allows     context-dependent attackers to cause a denial of     service (crash) or possibly execute arbitrary code via     a long string, which triggers a stack-based buffer     overflow.(CVE-2015-8982)

  - The posix_spawn_file_actions_addopen function in glibc     before 2.20 does not copy its path argument in     accordance with the POSIX specification, which allows     context-dependent attackers to trigger use-after-free     vulnerabilities.(CVE-2014-4043)

  - res_query in libresolv in glibc before 2.25 allows     remote attackers to cause a denial of service (NULL     pointer dereference and process crash).(CVE-2015-5180)

  - A buffer overflow has been discovered in the GNU C     Library (aka glibc or libc6) in the
    __mempcpy_avx512_no_vzeroupper function when particular     conditions are met. An attacker could use this     vulnerability to cause a denial of service or     potentially execute code.(CVE-2018-11237)

  - In the GNU C Library (aka glibc or libc6) through 2.29,     proceed_next_node in posix/regexec.c has a heap-based     buffer over-read via an attempted case-insensitive     regular-expression match.(CVE-2019-9169)

  - The iconv program in the GNU C Library (aka glibc or     libc6) 2.25 and earlier, when invoked with the -c     option, enters an infinite loop when processing invalid     multi-byte input sequences, leading to a denial of     service.(CVE-2016-10228)

  - The DNS stub resolver in the GNU C Library (aka glibc     or libc6) before version 2.26, when EDNS support is     enabled, will solicit large UDP responses from name     servers, potentially simplifying off-path DNS spoofing     attacks due to IP fragmentation.(CVE-2017-12132)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the glibc packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - The iconv program in the GNU C Library (aka glibc or     libc6) 2.25 and earlier, when invoked with the -c     option, enters an infinite loop when processing invalid     multi-byte input sequences, leading to a denial of     service.(CVE-2016-10228)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The iconv program in the GNU C Library (aka glibc or     libc6) 2.25 and earlier, when invoked with the -c     option, enters an infinite loop when processing invalid     multi-byte input sequences, leading to a denial of     service.(CVE-2016-10228)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
266254	NewStart CGSL MAIN 6.06 : glibc Multiple Vulnerabilities (NS-SA-2025-0229)	Nessus	NewStart CGSL Local Security Checks	critical
219406	Linux Distros Unpatched Vulnerability : CVE-2016-10228	Nessus	Misc.	medium
503010	Siemens SIMATIC S7-1500 TM MFP BIOS Improper Input Validation (CVE-2016-10228)	Tenable OT Security	Tenable.ot	medium
184978	Rocky Linux 8 : glibc (RLSA-2021:1585)	Nessus	Rocky Linux Local Security Checks	critical
168533	Ubuntu 16.04 ESM : GNU C Library vulnerabilities (USN-5768-1)	Nessus	Ubuntu Local Security Checks	medium
167455	NewStart CGSL MAIN 6.02 : glibc Multiple Vulnerabilities (NS-SA-2022-0085)	Nessus	NewStart CGSL Local Security Checks	critical
166426	Debian dla-3152 : glibc-doc - security update	Nessus	Debian Local Security Checks	critical
164426	SUSE SLES12 Security Update : glibc (SUSE-SU-2022:2886-1)	Nessus	SuSE Local Security Checks	high
158502	Ubuntu 18.04 LTS / 20.04 LTS : GNU C Library vulnerabilities (USN-5310-1)	Nessus	Ubuntu Local Security Checks	critical
157688	AlmaLinux 8 : glibc (ALSA-2021:1585)	Nessus	Alma Linux Local Security Checks	critical
155805	SUSE SLED15 / SLES15 Security Update : glibc (SUSE-SU-2021:3830-1)	Nessus	SuSE Local Security Checks	medium
154917	Oracle Linux 8 : glibc (ELSA-2021-9344)	Nessus	Oracle Linux Local Security Checks	critical
154915	Oracle Linux 8 : glibc (ELSA-2021-9280)	Nessus	Oracle Linux Local Security Checks	critical
154675	F5 Networks BIG-IP : GNU C Library (glibc) vulnerability (K52494142)	Nessus	F5 Networks Local Security Checks	medium
152158	SUSE SLED12 / SLES12 Security Update : glibc (SUSE-SU-2021:2480-1)	Nessus	SuSE Local Security Checks	critical
151769	EulerOS 2.0 SP5 : glibc (EulerOS-SA-2021-2216)	Nessus	Huawei Local Security Checks	medium
151245	EulerOS Virtualization 3.0.6.6 : glibc (EulerOS-SA-2021-2034)	Nessus	Huawei Local Security Checks	medium
150034	CentOS 8 : glibc (CESA-2021:1585)	Nessus	CentOS Local Security Checks	critical
149915	Oracle Linux 8 : glibc (ELSA-2021-1585)	Nessus	Oracle Linux Local Security Checks	critical
149664	RHEL 8 : glibc (RHSA-2021:1585)	Nessus	Red Hat Local Security Checks	critical
146627	Amazon Linux 2 : glibc (ALAS-2021-1605)	Nessus	Amazon Linux Local Security Checks	high
145333	GLSA-202101-20 : glibc: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
145196	Fedora 32 : glibc (2021-6e581c051a)	Nessus	Fedora Local Security Checks	high
129223	EulerOS 2.0 SP3 : glibc (EulerOS-SA-2019-2030)	Nessus	Huawei Local Security Checks	critical
126545	EulerOS Virtualization for ARM 64 3.0.2.0 : glibc (EulerOS-SA-2019-1703)	Nessus	Huawei Local Security Checks	medium
126275	EulerOS 2.0 SP8 : glibc (EulerOS-SA-2019-1648)	Nessus	Huawei Local Security Checks	medium

Detections

Analytics

CVE-2016-10228

medium

Tenable Plugins

critical

medium

medium

critical

medium

critical

critical

high

critical

critical

medium

critical

critical

medium

critical

medium

medium

critical

critical

critical

high

high

high

critical

medium

medium