Description

The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.

INFO

Published Date :

2024-04-17T17:27:40.541Z

Last Modified :

2025-10-30T03:55:59.233Z

Source :

glibc
AFFECTED PRODUCTS

The following products are affected by CVE-2024-2961 vulnerability.

Vendors Products
Debian
  • Debian Linux
Gnu
  • Glibc
Netapp
  • Active Iq Unified Manager
  • Hci Compute Node
  • Hci H300s
  • Hci H300s Firmware
  • Hci H410c
  • Hci H410c Firmware
  • Hci H410s
  • Hci H410s Firmware
  • Hci H500s
  • Hci H500s Firmware
  • Hci H610c
  • Hci H610c Firmware
  • Hci H610s
  • Hci H610s Firmware
  • Hci H615c
  • Hci H615c Firmware
  • Hci H700s
  • Hci H700s Firmware
  • Ontap Select Deploy Administration Utility
Redhat
  • Enterprise Linux
  • Openshift
  • Rhel Aus
  • Rhel E4s
  • Rhel Eus
  • Rhel Tus
  • Rhev Hypervisor
  • Service Interconnect
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-2961.

URL Resource
http://www.openwall.com/lists/oss-security/2024/04/17/9 cve-icon cve-icon
http://www.openwall.com/lists/oss-security/2024/04/18/4 cve-icon cve-icon
http://www.openwall.com/lists/oss-security/2024/04/24/2 cve-icon cve-icon
http://www.openwall.com/lists/oss-security/2024/05/27/1 cve-icon cve-icon
http://www.openwall.com/lists/oss-security/2024/05/27/2 cve-icon cve-icon
http://www.openwall.com/lists/oss-security/2024/05/27/3 cve-icon cve-icon
http://www.openwall.com/lists/oss-security/2024/05/27/4 cve-icon cve-icon
http://www.openwall.com/lists/oss-security/2024/05/27/5 cve-icon cve-icon
http://www.openwall.com/lists/oss-security/2024/05/27/6 cve-icon cve-icon
http://www.openwall.com/lists/oss-security/2024/07/22/5 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html cve-icon cve-icon
https://lists.fedoraproject.org/archives/list/[email protected]/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/ cve-icon cve-icon
https://lists.fedoraproject.org/archives/list/[email protected]/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/ cve-icon cve-icon
https://lists.fedoraproject.org/archives/list/[email protected]/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/ cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-2961 cve-icon
https://security.netapp.com/advisory/ntap-20240531-0002/ cve-icon cve-icon
https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004 cve-icon cve-icon
https://www.ambionics.io/blog/iconv-cve-2024-2961-p1 cve-icon
https://www.ambionics.io/blog/iconv-cve-2024-2961-p2 cve-icon
https://www.ambionics.io/blog/iconv-cve-2024-2961-p3 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-2961 cve-icon
https://www.openwall.com/lists/oss-security/2024/04/17/9 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact