Attacker Value
Unknown
CVE-2019-25013
CVE-2019-25013
(Last updated November 10, 2023) ▾
MITRE ATT&CK
Log in to add MITRE ATT&CK tag
Add MITRE ATT&CK tactics and techniques that apply to this CVE.
Description
The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
Data provided by the National Vulnerability Database (NVD)
Base Score:
5.9 Medium
Impact Score:
3.6
Exploitability Score:
2.2
Attack Vector (AV):
Network
Attack Complexity (AC):
High
Privileges Required (PR):
None
User Interaction (UI):
None
Scope (S):
Unchanged
Confidentiality (C):
None
Integrity (I):
None
Availability (A):
High
General Information
Vendors
- broadcom,
- debian,
- fedoraproject,
- gnu,
- netapp
Products
- 500f firmware -,
- a250 firmware -,
- debian linux 10.0,
- fabric operating system -,
- fedora 32,
- fedora 33,
- glibc,
- ontap select deploy administration utility -,
- service processor -
References
Advisory
