Vulnerability-Lookup

CVE-2021-3326 (GCVE-0-2021-3326)

Vulnerability from cvelistv5 – Published: 2021-01-27 00:00 – Updated: 2025-06-09 15:18

Summary

The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-06-09 15:17 UTC

CWE

n/a
CWE-617 - Reachable Assertion

Assigner

mitre mitre root

References

8 references

URL	Tags
https://sourceware.org/bugzilla/show_bug.cgi?id=27256
https://sourceware.org/git/?p=glibc.git%3Ba=commi…
http://www.openwall.com/lists/oss-security/2021/01/28/2	mailing-list
https://security.gentoo.org/glsa/202107-07	vendor-advisory
https://www.oracle.com/security-alerts/cpujan2022.html
https://security.netapp.com/advisory/ntap-2021030…
https://www.oracle.com/security-alerts/cpuapr2022.html
https://lists.debian.org/debian-lts-announce/2022…	mailing-list

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T16:53:17.469Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=27256"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=7d88c6142c6efc160c0ee5e4f85cde382c072888"
          },
          {
            "name": "[oss-security] 20210128 Re: glibc iconv crash with ISO-2022-JP-3",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/01/28/2"
          },
          {
            "name": "GLSA-202107-07",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202107-07"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujan2022.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20210304-0007/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
          },
          {
            "name": "[debian-lts-announce] 20221017 [SECURITY] [DLA 3152-1] glibc security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2021-3326",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-09T15:17:18.701250Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-617",
                "description": "CWE-617 Reachable Assertion",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-09T15:18:04.653Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-10-17T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=27256"
        },
        {
          "url": "https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=7d88c6142c6efc160c0ee5e4f85cde382c072888"
        },
        {
          "name": "[oss-security] 20210128 Re: glibc iconv crash with ISO-2022-JP-3",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/01/28/2"
        },
        {
          "name": "GLSA-202107-07",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202107-07"
        },
        {
          "url": "https://www.oracle.com/security-alerts/cpujan2022.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20210304-0007/"
        },
        {
          "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
        },
        {
          "name": "[debian-lts-announce] 20221017 [SECURITY] [DLA 3152-1] glibc security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-3326",
    "datePublished": "2021-01-27T00:00:00.000Z",
    "dateReserved": "2021-01-27T00:00:00.000Z",
    "dateUpdated": "2025-06-09T15:18:04.653Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2021-3326",
      "date": "2026-09-13",
      "epss": "0.03093",
      "percentile": "0.86982"
    },
    "microsoft_vex": {
      "current_release_date": "2021-02-04T00:00:00.000Z",
      "cve": "CVE-2021-3326",
      "id": "msrc_CVE-2021-3326",
      "initial_release_date": "2021-01-02T00:00:00.000Z",
      "product_status:fixed": "14",
      "product_status:known_affected": "14",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier when processing invalid input sequences in the ISO-2022-JP-3 encoding fails an assertion in the code path and aborts the program potentially resulting in a denial of service.",
      "url": "https://msrc.microsoft.com/csaf/vex/2021/msrc_cve-2021-3326.json",
      "version": "1"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2021-3326\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2021-01-27T20:15:14.020\",\"lastModified\":\"2025-06-09T16:15:32.670\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.\"},{\"lang\":\"es\",\"value\":\"La funci\u00f3n iconv en la biblioteca GNU C (tambi\u00e9n se conoce como glibc o libc6) versiones 2.32 y anteriores, cuando procesa secuencias de entrada no v\u00e1lidas en la codificaci\u00f3n ISO-2022-JP-3, se produce un fallo una aserci\u00f3n en la ruta del c\u00f3digo y aborta el programa, potencialmente resultando en una denegaci\u00f3n de servicio\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:P\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-617\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-617\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"2.32.0\",\"matchCriteriaId\":\"290E9831-5E7A-4EE8-9496-FF8C590038F2\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.0\",\"versionEndIncluding\":\"11.60.3\",\"matchCriteriaId\":\"7402489D-85E5-4662-BF87-259740DC72F8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E7CF3019-975D-40BB-A8A4-894E62BD3797\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:1.5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DAEB09CA-9352-43CD-AF66-92BE416E039C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp2410\",\"matchCriteriaId\":\"5E63B7B2-409A-476E-BA12-2A2D2F3B85DE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"983D27DE-BC89-454E-AE47-95A26A3651E2\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp2410\",\"matchCriteriaId\":\"ADB5D4C9-DA14-4188-9181-17336F9445F6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5825AEE1-B668-40BD-86A9-2799430C742C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp2410\",\"matchCriteriaId\":\"0B65E2F3-57EC-46C0-BB4A-0A0F3F8D387E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3DA2D526-BDCF-4A65-914A-B3BA3A0CD613\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp2410\",\"matchCriteriaId\":\"90B7CFBF-761C-4EAA-A322-EF5E294AADED\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE0CF40B-E5BD-4558-9321-184D58EF621D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp2410\",\"matchCriteriaId\":\"48B28ABF-7E1A-4A1E-8F78-0D95D7BDF886\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F3C9C09-7B2B-4DB6-8BE0-35302ED35776\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp2410\",\"matchCriteriaId\":\"48B28ABF-7E1A-4A1E-8F78-0D95D7BDF886\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F3C9C09-7B2B-4DB6-8BE0-35302ED35776\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp2410\",\"matchCriteriaId\":\"E74AAF52-1388-4BD9-B17B-3A6A32CA3608\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"95503CE5-1D06-4092-A60D-D310AADCAFB1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp3110\",\"matchCriteriaId\":\"A107698C-9C63-44A9-8A2B-81EDD5702B4C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"983D27DE-BC89-454E-AE47-95A26A3651E2\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp3110\",\"matchCriteriaId\":\"0FC0460E-4695-44FB-99EE-28B2C957B760\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5825AEE1-B668-40BD-86A9-2799430C742C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp3110\",\"matchCriteriaId\":\"BD54A092-85A7-4459-9C69-19E6E24AC24B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3DA2D526-BDCF-4A65-914A-B3BA3A0CD613\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp3110\",\"matchCriteriaId\":\"5F813DBC-BA1E-4C73-AA11-1BD3F9508372\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE0CF40B-E5BD-4558-9321-184D58EF621D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp3110\",\"matchCriteriaId\":\"EFDF4F39-1C6C-4AD3-99CF-BD5B44B8C71B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F3C9C09-7B2B-4DB6-8BE0-35302ED35776\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp3110\",\"matchCriteriaId\":\"EFDF4F39-1C6C-4AD3-99CF-BD5B44B8C71B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F3C9C09-7B2B-4DB6-8BE0-35302ED35776\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"xcp3110\",\"matchCriteriaId\":\"416B805F-799A-4466-AC5A-93D083A2ABBD\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"95503CE5-1D06-4092-A60D-D310AADCAFB1\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"}]}]}],\"references\":[{\"url\":\"http://www.openwall.com/lists/oss-security/2021/01/28/2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202107-07\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20210304-0007/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://sourceware.org/bugzilla/show_bug.cgi?id=27256\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=7d88c6142c6efc160c0ee5e4f85cde382c072888\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.oracle.com/security-alerts/cpuapr2022.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Not Applicable\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujan2022.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2021/01/28/2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202107-07\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20210304-0007/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://sourceware.org/bugzilla/show_bug.cgi?id=27256\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=7d88c6142c6efc160c0ee5e4f85cde382c072888\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.oracle.com/security-alerts/cpuapr2022.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujan2022.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-03-21T01:17:05+00:00",
      "cve": "CVE-2021-3326",
      "id": "CVE-2021-3326",
      "initial_release_date": "2021-01-27T00:00:00+00:00",
      "product_status:fixed": "2598",
      "product_status:known_affected": "10",
      "product_status:known_not_affected": "226",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "glibc: Assertion failure in ISO-2022-JP-3 gconv module related to combining characters",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-3326.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://sourceware.org/bugzilla/show_bug.cgi?id=27256\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=7d88c6142c6efc160c0ee5e4f85cde382c072888\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2021/01/28/2\", \"name\": \"[oss-security] 20210128 Re: glibc iconv crash with ISO-2022-JP-3\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"https://security.gentoo.org/glsa/202107-07\", \"name\": \"GLSA-202107-07\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpujan2022.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20210304-0007/\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpuapr2022.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html\", \"name\": \"[debian-lts-announce] 20221017 [SECURITY] [DLA 3152-1] glibc security update\", \"tags\": [\"mailing-list\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-03T16:53:17.469Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2021-3326\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-06-09T15:17:18.701250Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-617\", \"description\": \"CWE-617 Reachable Assertion\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-06-09T15:17:36.861Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"n/a\", \"product\": \"n/a\", \"versions\": [{\"status\": \"affected\", \"version\": \"n/a\"}]}], \"references\": [{\"url\": \"https://sourceware.org/bugzilla/show_bug.cgi?id=27256\"}, {\"url\": \"https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=7d88c6142c6efc160c0ee5e4f85cde382c072888\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2021/01/28/2\", \"name\": \"[oss-security] 20210128 Re: glibc iconv crash with ISO-2022-JP-3\", \"tags\": [\"mailing-list\"]}, {\"url\": \"https://security.gentoo.org/glsa/202107-07\", \"name\": \"GLSA-202107-07\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://www.oracle.com/security-alerts/cpujan2022.html\"}, {\"url\": \"https://security.netapp.com/advisory/ntap-20210304-0007/\"}, {\"url\": \"https://www.oracle.com/security-alerts/cpuapr2022.html\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html\", \"name\": \"[debian-lts-announce] 20221017 [SECURITY] [DLA 3152-1] glibc security update\", \"tags\": [\"mailing-list\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"text\", \"description\": \"n/a\"}]}], \"providerMetadata\": {\"orgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"shortName\": \"mitre\", \"dateUpdated\": \"2022-10-17T00:00:00.000Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2021-3326\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-06-09T15:18:04.653Z\", \"dateReserved\": \"2021-01-27T00:00:00.000Z\", \"assignerOrgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"datePublished\": \"2021-01-27T00:00:00.000Z\", \"assignerShortName\": \"mitre\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

SSA-398330

Vulnerability from csaf_siemens - Published: 2023-12-12 00:00 - Updated: 2025-08-12 00:00

Summary

SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5

Scope

544 vulnerabilities in this advisory, including CVE-2021-3326.

CVE-2021-3326

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C

Known affected: 5 products

https://support.industry.siemens.com/cs/ww/en/view/109478459/

Open the full advisory

SSA-831302

Vulnerability from csaf_siemens - Published: 2023-06-13 00:00 - Updated: 2024-04-09 00:00

Summary

SSA-831302: Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP before V1.3.0

Scope

72 vulnerabilities in this advisory, including CVE-2021-3326.

CVE-2021-3326

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C

Known affected: 1 product

https://support.industry.siemens.com/cs/ww/en/view/109945851/

Open the full advisory

SUSE-SU-2021:0608-1

Vulnerability from csaf_suse - Published: 2021-02-25 20:04 - Updated: 2021-02-25 20:04

Summary

Security update for glibc

Severity

Moderate

Scope

2 vulnerabilities in this advisory, including CVE-2021-3326.

CVE-2021-3326

6.2 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Recommended: 67 products

Open the full advisory

SUSE-SU-2021:0653-1

Vulnerability from csaf_suse - Published: 2021-02-26 18:54 - Updated: 2021-02-26 18:54

Summary

Security update for glibc

Severity

Important

Scope

5 vulnerabilities in this advisory, including CVE-2021-3326.

CVE-2021-3326

6.2 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Recommended: 358 products

Open the full advisory

SUSE-SU-2022:2886-1

Vulnerability from csaf_suse - Published: 2022-08-24 13:04 - Updated: 2022-08-24 13:04

Summary

Security update for glibc

Severity

Important

Scope

7 vulnerabilities in this advisory, including CVE-2021-3326.

CVE-2021-3326

6.2 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Recommended: 24 products

Open the full advisory

SUSE-SU-2024:0759-1

Vulnerability from csaf_suse - Published: 2024-03-05 10:25 - Updated: 2024-03-05 10:25

Summary

Security update for glibc

Severity

Important

Scope

5 vulnerabilities in this advisory, including CVE-2021-3326.

CVE-2021-3326

6.2 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Recommended: 12 products

Open the full advisory

ubuntu-cve-2021-3326

Vulnerability from osv_ubuntu

Published

2021-01-27 20:15

Modified

2026-04-22 07:39

Summary

Details

Severity

7.5 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2021-3326	REPORT
	https://sourceware.org/pipermail/libc-alpha/2021-…	REPORT
	https://bugs.chromium.org/p/project-zero/issues/d…	REPORT
	https://ubuntu.com/security/notices/USN-5310-1	ADVISORY
	https://ubuntu.com/security/notices/USN-5699-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2021-3326	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "eglibc-source",
            "binary_version": "2.19-0ubuntu6.15+esm4"
          },
          {
            "binary_name": "libc-bin",
            "binary_version": "2.19-0ubuntu6.15+esm4"
          },
          {
            "binary_name": "libc-dev-bin",
            "binary_version": "2.19-0ubuntu6.15+esm4"
          },
          {
            "binary_name": "libc6",
            "binary_version": "2.19-0ubuntu6.15+esm4"
          },
          {
            "binary_name": "libc6-amd64",
            "binary_version": "2.19-0ubuntu6.15+esm4"
          },
          {
            "binary_name": "libc6-armel",
            "binary_version": "2.19-0ubuntu6.15+esm4"
          },
          {
            "binary_name": "libc6-dev-amd64",
            "binary_version": "2.19-0ubuntu6.15+esm4"
          },
          {
            "binary_name": "libc6-dev-armel",
            "binary_version": "2.19-0ubuntu6.15+esm4"
          },
          {
            "binary_name": "libc6-dev-i386",
            "binary_version": "2.19-0ubuntu6.15+esm4"
          },
          {
            "binary_name": "libc6-dev-x32",
            "binary_version": "2.19-0ubuntu6.15+esm4"
          },
          {
            "binary_name": "libc6-i386",
            "binary_version": "2.19-0ubuntu6.15+esm4"
          },
          {
            "binary_name": "libc6-pic",
            "binary_version": "2.19-0ubuntu6.15+esm4"
          },
          {
            "binary_name": "libc6-prof",
            "binary_version": "2.19-0ubuntu6.15+esm4"
          },
          {
            "binary_name": "libc6-x32",
            "binary_version": "2.19-0ubuntu6.15+esm4"
          },
          {
            "binary_name": "multiarch-support",
            "binary_version": "2.19-0ubuntu6.15+esm4"
          },
          {
            "binary_name": "nscd",
            "binary_version": "2.19-0ubuntu6.15+esm4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "eglibc",
        "purl": "pkg:deb/ubuntu/eglibc@2.19-0ubuntu6.15+esm4?arch=source\u0026distro=esm-infra-legacy/trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.17-93ubuntu4",
        "2.18-0ubuntu1",
        "2.18-0ubuntu2",
        "2.18-0ubuntu4",
        "2.18-0ubuntu5",
        "2.18-0ubuntu6",
        "2.18-0ubuntu7",
        "2.19-0ubuntu2",
        "2.19-0ubuntu3",
        "2.19-0ubuntu4",
        "2.19-0ubuntu5",
        "2.19-0ubuntu6",
        "2.19-0ubuntu6.1",
        "2.19-0ubuntu6.3",
        "2.19-0ubuntu6.4",
        "2.19-0ubuntu6.5",
        "2.19-0ubuntu6.6",
        "2.19-0ubuntu6.7",
        "2.19-0ubuntu6.8",
        "2.19-0ubuntu6.9",
        "2.19-0ubuntu6.10",
        "2.19-0ubuntu6.11",
        "2.19-0ubuntu6.13",
        "2.19-0ubuntu6.14",
        "2.19-0ubuntu6.15",
        "2.19-0ubuntu6.15+esm1",
        "2.19-0ubuntu6.15+esm2",
        "2.19-0ubuntu6.15+esm3",
        "2.19-0ubuntu6.15+esm4"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "glibc-source",
            "binary_version": "2.23-0ubuntu11.3+esm2"
          },
          {
            "binary_name": "libc-bin",
            "binary_version": "2.23-0ubuntu11.3+esm2"
          },
          {
            "binary_name": "libc-dev-bin",
            "binary_version": "2.23-0ubuntu11.3+esm2"
          },
          {
            "binary_name": "libc6",
            "binary_version": "2.23-0ubuntu11.3+esm2"
          },
          {
            "binary_name": "libc6-amd64",
            "binary_version": "2.23-0ubuntu11.3+esm2"
          },
          {
            "binary_name": "libc6-armel",
            "binary_version": "2.23-0ubuntu11.3+esm2"
          },
          {
            "binary_name": "libc6-dev-amd64",
            "binary_version": "2.23-0ubuntu11.3+esm2"
          },
          {
            "binary_name": "libc6-dev-armel",
            "binary_version": "2.23-0ubuntu11.3+esm2"
          },
          {
            "binary_name": "libc6-dev-i386",
            "binary_version": "2.23-0ubuntu11.3+esm2"
          },
          {
            "binary_name": "libc6-dev-s390",
            "binary_version": "2.23-0ubuntu11.3+esm2"
          },
          {
            "binary_name": "libc6-dev-x32",
            "binary_version": "2.23-0ubuntu11.3+esm2"
          },
          {
            "binary_name": "libc6-i386",
            "binary_version": "2.23-0ubuntu11.3+esm2"
          },
          {
            "binary_name": "libc6-pic",
            "binary_version": "2.23-0ubuntu11.3+esm2"
          },
          {
            "binary_name": "libc6-s390",
            "binary_version": "2.23-0ubuntu11.3+esm2"
          },
          {
            "binary_name": "libc6-x32",
            "binary_version": "2.23-0ubuntu11.3+esm2"
          },
          {
            "binary_name": "locales",
            "binary_version": "2.23-0ubuntu11.3+esm2"
          },
          {
            "binary_name": "locales-all",
            "binary_version": "2.23-0ubuntu11.3+esm2"
          },
          {
            "binary_name": "multiarch-support",
            "binary_version": "2.23-0ubuntu11.3+esm2"
          },
          {
            "binary_name": "nscd",
            "binary_version": "2.23-0ubuntu11.3+esm2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "glibc",
        "purl": "pkg:deb/ubuntu/glibc@2.23-0ubuntu11.3+esm2?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.23-0ubuntu11.3+esm2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.21-0ubuntu4",
        "2.21-0ubuntu5",
        "2.21-0ubuntu6",
        "2.23-0ubuntu1",
        "2.23-0ubuntu2",
        "2.23-0ubuntu3",
        "2.23-0ubuntu4",
        "2.23-0ubuntu5",
        "2.23-0ubuntu6",
        "2.23-0ubuntu7",
        "2.23-0ubuntu9",
        "2.23-0ubuntu10",
        "2.23-0ubuntu11",
        "2.23-0ubuntu11.2",
        "2.23-0ubuntu11.3",
        "2.23-0ubuntu11.3+esm1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "glibc-source",
            "binary_version": "2.27-3ubuntu1.5"
          },
          {
            "binary_name": "libc-bin",
            "binary_version": "2.27-3ubuntu1.5"
          },
          {
            "binary_name": "libc-dev-bin",
            "binary_version": "2.27-3ubuntu1.5"
          },
          {
            "binary_name": "libc6",
            "binary_version": "2.27-3ubuntu1.5"
          },
          {
            "binary_name": "libc6-amd64",
            "binary_version": "2.27-3ubuntu1.5"
          },
          {
            "binary_name": "libc6-armel",
            "binary_version": "2.27-3ubuntu1.5"
          },
          {
            "binary_name": "libc6-dev-amd64",
            "binary_version": "2.27-3ubuntu1.5"
          },
          {
            "binary_name": "libc6-dev-armel",
            "binary_version": "2.27-3ubuntu1.5"
          },
          {
            "binary_name": "libc6-dev-i386",
            "binary_version": "2.27-3ubuntu1.5"
          },
          {
            "binary_name": "libc6-dev-s390",
            "binary_version": "2.27-3ubuntu1.5"
          },
          {
            "binary_name": "libc6-dev-x32",
            "binary_version": "2.27-3ubuntu1.5"
          },
          {
            "binary_name": "libc6-i386",
            "binary_version": "2.27-3ubuntu1.5"
          },
          {
            "binary_name": "libc6-lse",
            "binary_version": "2.27-3ubuntu1.5"
          },
          {
            "binary_name": "libc6-pic",
            "binary_version": "2.27-3ubuntu1.5"
          },
          {
            "binary_name": "libc6-s390",
            "binary_version": "2.27-3ubuntu1.5"
          },
          {
            "binary_name": "libc6-x32",
            "binary_version": "2.27-3ubuntu1.5"
          },
          {
            "binary_name": "locales",
            "binary_version": "2.27-3ubuntu1.5"
          },
          {
            "binary_name": "locales-all",
            "binary_version": "2.27-3ubuntu1.5"
          },
          {
            "binary_name": "multiarch-support",
            "binary_version": "2.27-3ubuntu1.5"
          },
          {
            "binary_name": "nscd",
            "binary_version": "2.27-3ubuntu1.5"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "glibc",
        "purl": "pkg:deb/ubuntu/glibc@2.27-3ubuntu1.5?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.27-3ubuntu1.5"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.26-0ubuntu2",
        "2.26-0ubuntu2.1",
        "2.27-0ubuntu2",
        "2.27-0ubuntu3",
        "2.27-3ubuntu1",
        "2.27-3ubuntu1.2",
        "2.27-3ubuntu1.3",
        "2.27-3ubuntu1.4"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "glibc-source",
            "binary_version": "2.31-0ubuntu9.7"
          },
          {
            "binary_name": "libc-bin",
            "binary_version": "2.31-0ubuntu9.7"
          },
          {
            "binary_name": "libc-dev-bin",
            "binary_version": "2.31-0ubuntu9.7"
          },
          {
            "binary_name": "libc6",
            "binary_version": "2.31-0ubuntu9.7"
          },
          {
            "binary_name": "libc6-amd64",
            "binary_version": "2.31-0ubuntu9.7"
          },
          {
            "binary_name": "libc6-armel",
            "binary_version": "2.31-0ubuntu9.7"
          },
          {
            "binary_name": "libc6-dev-amd64",
            "binary_version": "2.31-0ubuntu9.7"
          },
          {
            "binary_name": "libc6-dev-armel",
            "binary_version": "2.31-0ubuntu9.7"
          },
          {
            "binary_name": "libc6-dev-i386",
            "binary_version": "2.31-0ubuntu9.7"
          },
          {
            "binary_name": "libc6-dev-s390",
            "binary_version": "2.31-0ubuntu9.7"
          },
          {
            "binary_name": "libc6-dev-x32",
            "binary_version": "2.31-0ubuntu9.7"
          },
          {
            "binary_name": "libc6-i386",
            "binary_version": "2.31-0ubuntu9.7"
          },
          {
            "binary_name": "libc6-lse",
            "binary_version": "2.31-0ubuntu9.7"
          },
          {
            "binary_name": "libc6-pic",
            "binary_version": "2.31-0ubuntu9.7"
          },
          {
            "binary_name": "libc6-prof",
            "binary_version": "2.31-0ubuntu9.7"
          },
          {
            "binary_name": "libc6-s390",
            "binary_version": "2.31-0ubuntu9.7"
          },
          {
            "binary_name": "libc6-x32",
            "binary_version": "2.31-0ubuntu9.7"
          },
          {
            "binary_name": "locales",
            "binary_version": "2.31-0ubuntu9.7"
          },
          {
            "binary_name": "locales-all",
            "binary_version": "2.31-0ubuntu9.7"
          },
          {
            "binary_name": "nscd",
            "binary_version": "2.31-0ubuntu9.7"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "glibc",
        "purl": "pkg:deb/ubuntu/glibc@2.31-0ubuntu9.7?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.31-0ubuntu9.7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.30-0ubuntu2",
        "2.30-0ubuntu3",
        "2.31-0ubuntu5",
        "2.31-0ubuntu6",
        "2.31-0ubuntu7",
        "2.31-0ubuntu9",
        "2.31-0ubuntu9.1",
        "2.31-0ubuntu9.2",
        "2.31-0ubuntu9.3"
      ]
    }
  ],
  "aliases": [],
  "details": "The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.",
  "id": "UBUNTU-CVE-2021-3326",
  "modified": "2026-04-22T07:39:45Z",
  "published": "2021-01-27T20:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-3326"
    },
    {
      "type": "REPORT",
      "url": "https://sourceware.org/pipermail/libc-alpha/2021-January/122058.html"
    },
    {
      "type": "REPORT",
      "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=2146"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5310-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5699-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3326"
    }
  ],
  "related": [
    "USN-5310-1",
    "USN-5699-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2021-3326"
  ]
}

WID-SEC-W-2022-1170

Vulnerability from csaf_certbund - Published: 2021-01-27 23:00 - Updated: 2024-12-11 23:00

Summary

GNU libc: Schwachstelle ermöglicht Denial of Service

Severity

Mittel

Scope

1 vulnerability in this advisory, including CVE-2021-3326.

CVE-2021-3326

Es existiert eine Schwachstelle in GNU libc, welche aufgrund eines "Reachable Assertion" besteht. Die Schwachstelle tritt bei der Konvertierung von ISO-2022-JP-3 zum UTF-8 Format auf. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um einen Denial of Service Zustand herbeizuführen.

Known affected: 14 products

Open the full advisory

WID-SEC-W-2023-1432

Vulnerability from csaf_certbund - Published: 2023-06-12 22:00 - Updated: 2023-06-22 22:00

Summary

Siemens SIMATIC S7: Mehrere Schwachstellen

Severity

Kritisch

Scope

149 vulnerabilities in this advisory, including CVE-2021-3326.

CVE-2021-3326

In Siemens SIMATIC S7 existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von unzulässigen Einschränkungen, Pufferüberläufen, fehlenden Freigaben und use-after-free-Problemen. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, seine Privilegien zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erhöhte Privilegien.

Known affected: 2 products

Open the full advisory

WID-SEC-W-2025-0227

Vulnerability from csaf_certbund - Published: 2021-11-30 23:00 - Updated: 2025-01-30 23:00

Summary

IBM QRadar SIEM: Mehrere Schwachstellen

Severity

Hoch

Scope

105 vulnerabilities in this advisory, including CVE-2021-3326.

CVE-2021-3326

In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Schwachstellen bestehen in verschiedenen Komponenten. Ein entfernter, anonymer oder authentisierter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, Administratorrechte zu erlangen, beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.

Known affected: 3 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2021-3326 (GCVE-0-2021-3326)

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature