{"id":"CVE-2020-29562","title":"The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of s…","summary":"The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of s…","severity":"medium","cvss":4.8,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H","cwe":["CWE-617","CWE-617"],"vendor":"gnu","product":"glibc","affected":["glibc >= 2.30, <= 2.32","fedora = 32","e-series_santricity_os_controller >= 11.0.0, <= 11.60.3"],"published":"2020-12-04","updated":"2026-10-14","sourceUpdated":"2026-10-14T10:17:34.987","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2020-29562","references":[{"url":"https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","label":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TVCUNLQ3HXGS4VPUQKWTJGRAW2KTFGXS/","label":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/202101-20","label":"cve@mitre.org"},{"url":"https://security.netapp.com/advisory/ntap-20210122-0004/","label":"cve@mitre.org"},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=26923","label":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TVCUNLQ3HXGS4VPUQKWTJGRAW2KTFGXS/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/202101-20","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20210122-0004/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=26923","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd"],"epss":0.01531,"epssPercentile":0.74096,"ingestedAt":"2026-10-14T10:25:41.181Z","slug":"CVE-2020-29562","body":"## Overview\n\nThe iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.\n\n## Affected\n\n- `glibc >= 2.30, <= 2.32`\n- `fedora = 32`\n- `e-series_santricity_os_controller >= 11.0.0, <= 11.60.3`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":27,"depthScoreParts":{"impact":26.4,"likelihood":0.3,"exploitation":0,"ransomware":0},"changes":[]}