CVE-2024-2961
CVE-2024-2961
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.
CVSS 7.3 · Hoch · EPSS 88,3% · Öffentlicher Exploit · Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system
Betroffene Produkte und Versionen
glibc
- Softwareversionen
- ≥ 2.1.93, < 2.40: Betroffen (custom)
Auf 2.40 aktualisieren
glibc Debian:12
- Softwareversionen
- 2.36-9
- 2.36-9+deb12u1
- 2.36-9+deb12u2
- 2.36-9+deb12u3
- 2.36-9+deb12u4
- 2.36-9+deb12u5
- Betroffene Versionsbereiche
- ECOSYSTEM: < 2.36-9+deb12u6
Auf 2.36-9+deb12u6 aktualisieren
glibc Debian:13
- Betroffene Versionsbereiche
- ECOSYSTEM: < 2.37-18
Auf 2.37-18 aktualisieren
glibc Debian:14
- Betroffene Versionsbereiche
- ECOSYSTEM: < 2.37-18
Auf 2.37-18 aktualisieren
eglibc Ubuntu:Pro:14.04:LTS
- Softwareversionen
- 2.17-93ubuntu4
- 2.18-0ubuntu1
- 2.18-0ubuntu2
- 2.18-0ubuntu4
- 2.18-0ubuntu5
- 2.18-0ubuntu6
- 2.18-0ubuntu7
- 2.19-0ubuntu2
- 2.19-0ubuntu3
- 2.19-0ubuntu4
- 2.19-0ubuntu5
- 2.19-0ubuntu6
- 2.19-0ubuntu6.1
- 2.19-0ubuntu6.3
- 2.19-0ubuntu6.4
- 2.19-0ubuntu6.5
- 2.19-0ubuntu6.6
- 2.19-0ubuntu6.7
- 2.19-0ubuntu6.8
- 2.19-0ubuntu6.9
- 2.19-0ubuntu6.10
- 2.19-0ubuntu6.11
- 2.19-0ubuntu6.13
- 2.19-0ubuntu6.14
- 2.19-0ubuntu6.15
- 2.19-0ubuntu6.15+esm1
- 2.19-0ubuntu6.15+esm2
- Betroffene Versionsbereiche
- ECOSYSTEM: < 2.19-0ubuntu6.15+esm3
Auf 2.19-0ubuntu6.15+esm3 aktualisieren
glibc Ubuntu:Pro:16.04:LTS
- Softwareversionen
- 2.21-0ubuntu4
- 2.21-0ubuntu5
- 2.21-0ubuntu6
- 2.23-0ubuntu1
- 2.23-0ubuntu2
- 2.23-0ubuntu3
- 2.23-0ubuntu4
- 2.23-0ubuntu5
- 2.23-0ubuntu6
- 2.23-0ubuntu7
- 2.23-0ubuntu9
- 2.23-0ubuntu10
- 2.23-0ubuntu11
- 2.23-0ubuntu11.2
- 2.23-0ubuntu11.3
- 2.23-0ubuntu11.3+esm1
- 2.23-0ubuntu11.3+esm2
- 2.23-0ubuntu11.3+esm3
- 2.23-0ubuntu11.3+esm5
- Betroffene Versionsbereiche
- ECOSYSTEM: < 2.23-0ubuntu11.3+esm6
Auf 2.23-0ubuntu11.3+esm6 aktualisieren
glibc Ubuntu:Pro:18.04:LTS
- Softwareversionen
- 2.26-0ubuntu2
- 2.26-0ubuntu2.1
- 2.27-0ubuntu2
- 2.27-0ubuntu3
- 2.27-3ubuntu1
- 2.27-3ubuntu1.2
- 2.27-3ubuntu1.3
- 2.27-3ubuntu1.4
- 2.27-3ubuntu1.5
- 2.27-3ubuntu1.6
- 2.27-3ubuntu1.6+esm1
- Betroffene Versionsbereiche
- ECOSYSTEM: < 2.27-3ubuntu1.6+esm2
Auf 2.27-3ubuntu1.6+esm2 aktualisieren
glibc Ubuntu:20.04:LTS
- Softwareversionen
- 2.30-0ubuntu2
- 2.30-0ubuntu3
- 2.31-0ubuntu5
- 2.31-0ubuntu6
- 2.31-0ubuntu7
- 2.31-0ubuntu9
- 2.31-0ubuntu9.1
- 2.31-0ubuntu9.2
- 2.31-0ubuntu9.3
- 2.31-0ubuntu9.7
- 2.31-0ubuntu9.9
- 2.31-0ubuntu9.12
- 2.31-0ubuntu9.14
- Betroffene Versionsbereiche
- ECOSYSTEM: < 2.31-0ubuntu9.15
Auf 2.31-0ubuntu9.15 aktualisieren
glibc Ubuntu:22.04:LTS
- Softwareversionen
- 2.34-0ubuntu3
- 2.35-0ubuntu1
- 2.35-0ubuntu3
- 2.35-0ubuntu3.1
- 2.35-0ubuntu3.3
- 2.35-0ubuntu3.4
- 2.35-0ubuntu3.5
- 2.35-0ubuntu3.6
- Betroffene Versionsbereiche
- ECOSYSTEM: < 2.35-0ubuntu3.7
Auf 2.35-0ubuntu3.7 aktualisieren
glibc Ubuntu:24.04:LTS
- Softwareversionen
- 2.38-1ubuntu6
- 2.38-3ubuntu1
- 2.39-0ubuntu1
- 2.39-0ubuntu2
- 2.39-0ubuntu6
- 2.39-0ubuntu8
- Betroffene Versionsbereiche
- ECOSYSTEM: < 2.39-0ubuntu8.1
Auf 2.39-0ubuntu8.1 aktualisieren
Originalquellen
- https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004
- https://lists.fedoraproject.org/archives/list/[email protected]/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/
- http://www.openwall.com/lists/oss-security/2024/04/24/2
- http://www.openwall.com/lists/oss-security/2024/04/17/9
- http://www.openwall.com/lists/oss-security/2024/04/18/4
- https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html
- http://www.openwall.com/lists/oss-security/2024/05/27/2
- http://www.openwall.com/lists/oss-security/2024/05/27/6
- http://www.openwall.com/lists/oss-security/2024/05/27/1
- http://www.openwall.com/lists/oss-security/2024/05/27/4
- http://www.openwall.com/lists/oss-security/2024/05/27/5
- http://www.openwall.com/lists/oss-security/2024/05/27/3
- https://security.netapp.com/advisory/ntap-20240531-0002/
- http://www.openwall.com/lists/oss-security/2024/07/22/5
- https://www.ambionics.io/blog/iconv-cve-2024-2961-p1
- https://www.ambionics.io/blog/iconv-cve-2024-2961-p2
- https://www.ambionics.io/blog/iconv-cve-2024-2961-p3
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
- https://nvd.nist.gov/vuln/detail/CVE-2024-2961