p PatchFirst

CVE-2024-0684

CVE-2024-0684 · Coreutils: heap overflow in split --line-bytes with very long lines

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an application crash and denial of service.

CVSS 5.5 · Medium · EPSS 0.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • coreutils Debian:13

    Affected ranges
    • ECOSYSTEM: < 9.5-1

    Update to 9.5-1

  • coreutils Debian:14

    Affected ranges
    • ECOSYSTEM: < 9.5-1

    Update to 9.5-1

Original sources

Check your server →