PT-2026-29086 · Gnu+1 · Gnu C Library+1

Rocket Ma · Publicado 2026-01-01 · Atualizado 2026-06-10 · CVE-2026-4046

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.43 and earlier

Description The iconv() function in the GNU C Library may experience a crash due to an assertion failure when processing inputs from the IBM1390 or IBM1399 character sets. This could potentially be exploited to remotely crash an application.

Recommendations Remove the IBM1390 and IBM1399 character sets from systems that do not require them.

Correção

DoS

Assertion Failure

Enumeração de Fraquezas

CWE-617

Identificadores relacionados

ALSA-2026:20587

ALSA-2026:20594

BDU:2026-05928

CVE-2026-4046

ECHO-511D-493A-869E

OESA-2026-2031

OESA-2026-2032

OESA-2026-2033

OESA-2026-2034

OESA-2026-2035

OPENSUSE-SU-2026:10722-1

RHSA-2026:12740

RHSA-2026:20587

RHSA-2026:20594

RHSA-2026:20597

SUSE-SU-2026:1498-1

SUSE-SU-2026:1501-1

SUSE-SU-2026:2333-1

Produtos afetados

Gnu C Library

Rocky Linux

Referências · 56

• https://access.redhat.com/security/cve/CVE-2026-4046 · Nota
• https://sourceware.org/bugzilla/show_bug.cgi?id=33980 · Correção
• https://osv.dev/vulnerability/BELL-CVE-2026-4046 · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2026-20587.html · Aviso do Fabricante
• https://inbox.sourceware.org/libc-announce/[e-mail]/T · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-4046 · Aviso do Fabricante
• https://errata.rockylinux.org/RLSA-2026:20587 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2026/suse-su-20261498-1 · Nota
• https://bugzilla.suse.com/1262464 · Nota
• https://cve.org/CVERecord?id=CVE-2026-4046 · Nota de Segurança
• https://access.redhat.com/errata/RHSA-2026:20587 · Nota
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-4046 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2026-4046 · Aviso do Fabricante
• https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0007 · Nota
• https://docs.bell-sw.com/security/cves/CVE-2026-4046 · Nota