high
7.5
CWE
125
Advisory Published
Updated

CVE-2019-25013

First published: Mon Jan 04 2021(Updated: )

GNU glibc is vulnerable to a denial of service, caused by a buffer over-read in iconv feature. By sending a specially-crafted request, a remote attacker could exploit this vulnerability to cause a SIGSEGV.

Credit: cve@mitre.org cve@mitre.org cve@mitre.org

Affected SoftwareAffected VersionHow to fix
IBM Security Verify Access<=10.0.0
GNU glibc<=2.32
Fedoraproject Fedora=32
Fedoraproject Fedora=33
NetApp ONTAP Select Deploy administration utility
NetApp Service Processor
Broadcom Fabric Operating System
Netapp A250 Firmware
Netapp A250
Netapp 500f Firmware
Netapp 500f
Debian Debian Linux=10.0
Netapp Baseboard Management Controller A250 Firmware
Netapp Baseboard Management Controller A250
Netapp Baseboard Management Controller 500f Firmware
Netapp Baseboard Management Controller 500f
ubuntu/glibc<2.27-3ubuntu1.5
2.27-3ubuntu1.5
ubuntu/glibc<2.31-0ubuntu9.7
2.31-0ubuntu9.7
ubuntu/glibc<2.23-0ubuntu11.3+
2.23-0ubuntu11.3+
debian/glibc<=2.28-10+deb10u1
2.28-10+deb10u3
2.31-13+deb11u8
2.31-13+deb11u10
2.36-9+deb12u4
2.36-9+deb12u7
2.38-7
2.38-8
All of
Netapp A250 Firmware
Netapp A250
All of
Netapp 500f Firmware
Netapp 500f

Remedy

https://sourceware.org/bugzilla/show_bug.cgi?id=24973

Remedy

https://sourceware.org/git/?p=glibc.git;a=commit;h=ee7a3144c9922808181009b7b3e50e852fb4999b

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

Frequently Asked Questions

  • What is CVE-2019-25013?

    CVE-2019-25013 is a vulnerability in the iconv feature of GNU glibc that can be exploited by a remote attacker to cause a denial of service.

  • How severe is CVE-2019-25013?

    CVE-2019-25013 has a severity value of 7.5, which is considered high.

  • Which software versions are affected by CVE-2019-25013?

    IBM Security Verify Access 10.0.0, GNU glibc up to version 2.32, Fedoraproject Fedora 32 and 33, NetApp ONTAP Select Deploy administration utility, NetApp Service Processor, Broadcom Fabric Operating System, Netapp Baseboard Management Controller A250 Firmware, and Debian Debian Linux 10.0 are affected by CVE-2019-25013.

  • How can CVE-2019-25013 be exploited?

    CVE-2019-25013 can be exploited by sending a specially-crafted request to the iconv feature of GNU glibc, causing a SIGSEGV.

  • Are there any references for CVE-2019-25013?

    Yes, you can find more information about CVE-2019-25013 at the following references: [IBM X-Force Exchange](https://exchange.xforce.ibmcloud.com/vulnerabilities/194579), [IBM Support](https://www.ibm.com/support/pages/node/6538418), [Apache Kafka Mailing List](https://lists.apache.org/thread.html/r32d767ac804e9b8aad4355bb85960a6a1385eab7afff549a5e98660f@%3Cjira.kafka.apache.org%3E).

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203