High severity7.5NVD Advisory· Published Jan 27, 2021· Updated Jun 17, 2026

CVE-2021-3326

Description

The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GNU/Glibc2 versions
cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*range: <=2.32.0
- (no CPE)range: <=2.32
NetApp/E Series Santricity OS Controller
cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*
Range: >=11.0,<=11.60.3
NetApp/Ontap Select Deploy Administration Utility
cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*
Oracle Corporation/Communications Cloud Native Core Security Edge Protection Proxy
cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:1.5.0:*:*:*:*:*:*:*
Debian/linux
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Fujitsu/M10 1 Firmware
cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*
Range: <xcp2410
Fujitsu/M10 4 Firmware
cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*
Range: <xcp2410
Fujitsu/M10 4s Firmware
cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*
Range: <xcp2410
Fujitsu/M12 1 Firmware
cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*
Range: <xcp2410
Fujitsu/M12 2 Firmware
cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*
Range: <xcp2410
Fujitsu/M12 2s Firmware
cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*
Range: <xcp2410
GNU C Library/GNU C Librarydescription
osv-coords28 versions
pkg:rpm/almalinux/glibc-benchtests pkg:rpm/almalinux/glibc-nss-devel pkg:rpm/almalinux/glibc-static pkg:rpm/almalinux/nss_hesiod pkg:rpm/opensuse/glibc&distro=openSUSE%20Leap%2015.2 pkg:rpm/opensuse/glibc&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/glibc-testsuite-src&distro=openSUSE%20Leap%2015.2 pkg:rpm/suse/glibc&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2 pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP2 pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/glibc&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/glibc&distro=SUSE%20Manager%20Proxy%204.0 pkg:rpm/suse/glibc&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.0 pkg:rpm/suse/glibc&distro=SUSE%20Manager%20Server%204.0
< 2.28-151.el8+ 27 more
- (no CPE)range: < 2.28-151.el8
- (no CPE)range: < 2.28-151.el8
- (no CPE)range: < 2.28-151.el8
- (no CPE)range: < 2.28-151.el8
- (no CPE)range: < 2.26-lp152.26.6.1
- (no CPE)range: < 2.34-1.2
- (no CPE)range: < 2.26-lp152.26.6.1
- (no CPE)range: < 2.26-13.56.1
- (no CPE)range: < 2.26-13.56.1
- (no CPE)range: < 2.26-13.56.1
- (no CPE)range: < 2.26-13.56.1
- (no CPE)range: < 2.26-13.56.1
- (no CPE)range: < 2.26-13.56.1
- (no CPE)range: < 2.26-13.56.1
- (no CPE)range: < 2.11.3-17.110.43.1
- (no CPE)range: < 2.22-126.1
- (no CPE)range: < 2.22-126.1
- (no CPE)range: < 2.22-114.5.1
- (no CPE)range: < 2.26-13.56.1
- (no CPE)range: < 2.26-13.56.1
- (no CPE)range: < 2.26-13.56.1
- (no CPE)range: < 2.22-114.5.1
- (no CPE)range: < 2.26-13.56.1
- (no CPE)range: < 2.26-13.56.1
- (no CPE)range: < 2.22-114.5.1
- (no CPE)range: < 2.26-13.56.1
- (no CPE)range: < 2.26-13.56.1
- (no CPE)range: < 2.26-13.56.1

Patches

Vulnerability mechanics

References

www.oracle.com/security-alerts/cpujan2022.htmlnvdPatchThird Party Advisory
www.openwall.com/lists/oss-security/2021/01/28/2nvdMailing ListThird Party Advisory
lists.debian.org/debian-lts-announce/2022/10/msg00021.htmlnvdMailing ListThird Party Advisory
security.gentoo.org/glsa/202107-07nvdThird Party Advisory
security.netapp.com/advisory/ntap-20210304-0007/nvdThird Party Advisory
sourceware.org/bugzilla/show_bug.cginvdIssue TrackingThird Party Advisory
www.oracle.com/security-alerts/cpuapr2022.htmlnvdNot Applicable
sourceware.org/git/nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000