CVE-2012-6656: Input Validation
iconvdata/ibm930.c in GNU C Library (aka glibc) before 2.16 allows context-dependent attackers to cause a denial of service (out-of-bounds read) via a multibyte character value of "0xffff" to the iconv function when converting IBM930 encoded data to UTF-8.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-6656?
CVE-2012-6656 has a medium severity rating due to its potential to cause denial of service through out-of-bounds read.
How do I fix CVE-2012-6656?
To fix CVE-2012-6656, you should upgrade glibc to version 2.17 or later.
Which software is affected by CVE-2012-6656?
CVE-2012-6656 affects versions of GNU C Library (glibc) prior to 2.16, and it is also affective on specific Debian and Ubuntu Linux distributions.
Is CVE-2012-6656 exploited in the wild?
There are no widely reported cases of CVE-2012-6656 being actively exploited in the wild.
What are the potential impacts of CVE-2012-6656?
The potential impacts of CVE-2012-6656 include system instability and denial of service due to errors in character conversion.