#VU50404 Infinite loop in Glibc - CVE-2020-27618

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU50404

#VU50404 Infinite loop in Glibc - CVE-2020-27618

Published: January 4, 2021 / Updated: September 23, 2024


Vulnerability identifier: #VU50404
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2020-27618
CWE-ID: CWE-835
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
Glibc
Software vendor:
GNU

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop within iconv implementation when processing multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, IBM1399 encodings. A remote attacker can pass specially crafted data to the application, consume all available system resources and cause denial of service conditions.


Remediation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

External links