Out-of-bounds write in GNU glibc
Priority HIGH 74CWE-787Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Low · Low · High
- Fix status
- Partial Red Hat: 41 fixed, 1 without a fix
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat.
Summary
The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.8833 99th percentileScored 2026-11-07
Fix Partial glibc (The GNU C Library): 2.40Red Hat: 16 advisoriesRed Hat: 41 fixed, 1 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| GNU | glibc | 2.1.93 to before 2.40 | 2.40 | Patch available | CNA |
- glibc VendorGNU Affected 2.1.93 to before 2.40 Fixed in 2.40 Patch available CNA
CPE configurations NVD · 22
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:* | 2.1.93 to before 2.40 | Vulnerable | GNU |
| cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Debian |
| cpe:2.3:o:netapp:hci_h300s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:hci_h300s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:hci_h500s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:hci_h500s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:hci_h700s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:hci_h700s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:hci_h410s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
- cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:* Versions 2.1.93 to before 2.40 Vulnerable ·GNU
- cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
- cpe:2.3:o:netapp:hci_h300s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:hci_h300s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:hci_h500s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:hci_h500s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:hci_h700s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:hci_h700s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:hci_h410s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
Show 12 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:netapp:hci_h410s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:hci_h410c_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:hci_h410c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:hci_h610c_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:hci_h610c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:hci_h610s_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:hci_h610s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:hci_h615c_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:hci_h615c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:o:netapp:hci_compute_node:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
| cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:* | not specified by NVD | Running on | NetApp |
| cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | NetApp |
- cpe:2.3:h:netapp:hci_h410s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:hci_h410c_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:hci_h410c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:hci_h610c_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:hci_h610c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:hci_h610s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:hci_h610s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:hci_h615c_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:hci_h615c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:o:netapp:hci_compute_node:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
- cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
- cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
Remediation
- Fix · CNA glibc (The GNU C Library) Fixed in 2.40
Red Hat 16 advisories
- RHSA-2024:8235 Released 2024-10-23 · Red Hat rating ImportantOpenShift Container Platform 4.14.39 security update
- Red Hat OpenShift Container Platform 4.14 openshift4/ose-agent-installer-api-server-rhel8, openshift4/ose-cluster-baremetal-operator-rhel8, openshift4/ose-ibm-cloud-controller-manager-rhel8 +5
- RHSA-2024:7939 Released 2024-10-16 · Red Hat rating ImportantOpenShift Container Platform 4.13.52 security update
- Red Hat OpenShift Container Platform 4.13 rhcos
- RHSA-2024:7594 Released 2024-10-09 · Red Hat rating ImportantOpenShift Container Platform 4.15.36 security update
- Red Hat OpenShift Container Platform 4.15 openshift4/ose-ironic-rhel9, rhcos
Show 13 more Red Hat advisories
- RHSA-2024:7599 Released 2024-10-09 · Red Hat rating ImportantOpenShift Container Platform 4.16.16 bug fix and security update
- Red Hat OpenShift Container Platform 4.16 openshift4/ose-installer-rhel9, openshift4/ose-monitoring-plugin-rhel9, rhcos
- RHSA-2024:7590 Released 2024-10-09 · Red Hat rating ImportantOpenShift Container Platform 4.12.67 bug fix and security update
- Red Hat OpenShift Container Platform 4.12 openshift4/ose-ironic-rhel9, rhcos
- RHSA-2024:4126 Released 2024-06-26 · Red Hat rating ImportantRed Hat Service Interconnect 1.4.5 Release security update
- 9Base-Service-Interconnect-1.4 service-interconnect/skupper-config-sync-rhel9, service-interconnect/skupper-flow-collector-rhel9, service-interconnect/skupper-operator-bundle +3
- RHSA-2024:3588 Released 2024-06-04 · Red Hat rating Importantglibc security update
- Red Hat Enterprise Linux Client (v. 7) glibc-2.17-326.el7_9.3, glibc-common-2.17-326.el7_9.3, glibc-devel-2.17-326.el7_9.3 +3
- Red Hat Enterprise Linux Client Optional (v. 7) glibc-static-2.17-326.el7_9.3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) glibc-static-2.17-326.el7_9.3
- Red Hat Enterprise Linux Server (v. 7) glibc-2.17-326.el7_9.3, glibc-2.17-326.el7_9.3.ppc, glibc-common-2.17-326.el7_9.3 +5
- Red Hat Enterprise Linux Server Optional (v. 7) glibc-static-2.17-326.el7_9.3, glibc-static-2.17-326.el7_9.3.ppc
- Red Hat Enterprise Linux Workstation (v. 7) glibc-2.17-326.el7_9.3, glibc-common-2.17-326.el7_9.3, glibc-devel-2.17-326.el7_9.3 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) glibc-static-2.17-326.el7_9.3
- RHSA-2024:3464 Released 2024-05-29 · Red Hat rating Importantglibc security update
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) compat-libpthread-nonshared-2.28-101.el8_2.2, glibc-utils-2.28-101.el8_2.2
- Red Hat Enterprise Linux BaseOS AUS (v. 8.2) glibc-2.28-101.el8_2.2, glibc-all-langpacks-2.28-101.el8_2.2, glibc-common-2.28-101.el8_2.2 +47
- RHSA-2024:3411 Released 2024-05-28 · Red Hat rating Importantglibc security update
- Red Hat CodeReady Linux Builder EUS (v.9.2) glibc-benchtests-2.34-60.el9_2.14, glibc-nss-devel-2.34-60.el9_2.14, glibc-static-2.34-60.el9_2.14 +2
- Red Hat Enterprise Linux AppStream EUS (v.9.2) glibc-devel-2.34-60.el9_2.14, glibc-doc-2.34-60.el9_2.14, glibc-headers-2.34-60.el9_2.14 +2
- Red Hat Enterprise Linux BaseOS EUS (v.9.2) glibc-2.34-60.el9_2.14, glibc-all-langpacks-2.34-60.el9_2.14, glibc-common-2.34-60.el9_2.14 +47
- RHSA-2024:3423 Released 2024-05-28 · Red Hat rating Importantglibc security update
- Red Hat CodeReady Linux Builder EUS (v.9.0) glibc-benchtests-2.34-28.el9_0.6, glibc-nss-devel-2.34-28.el9_0.6, glibc-static-2.34-28.el9_0.6 +2
- Red Hat Enterprise Linux AppStream EUS (v.9.0) glibc-devel-2.34-28.el9_0.6, glibc-doc-2.34-28.el9_0.6, glibc-headers-2.34-28.el9_0.6 +2
- Red Hat Enterprise Linux BaseOS EUS (v.9.0) glibc-2.34-28.el9_0.6, glibc-all-langpacks-2.34-28.el9_0.6, glibc-common-2.34-28.el9_0.6 +47
- RHSA-2024:3339 Released 2024-05-23 · Red Hat rating Importantglibc security update
- Red Hat Enterprise Linux AppStream (v. 9) glibc-devel-2.34-100.el9_4.2, glibc-doc-2.34-100.el9_4.2, glibc-headers-2.34-100.el9_4.2 +2
- Red Hat Enterprise Linux BaseOS (v. 9) glibc-2.34-100.el9_4.2, glibc-all-langpacks-2.34-100.el9_4.2, glibc-common-2.34-100.el9_4.2 +47
- Red Hat Enterprise Linux CRB (v. 9) glibc-benchtests-2.34-100.el9_4.2, glibc-nss-devel-2.34-100.el9_4.2, glibc-static-2.34-100.el9_4.2 +2
- RHSA-2024:3312 Released 2024-05-23 · Red Hat rating Importantglibc security update
- Red Hat CodeReady Linux Builder EUS (v.8.8) glibc-benchtests-2.28-225.el8_8.11, glibc-nss-devel-2.28-225.el8_8.11, glibc-static-2.28-225.el8_8.11 +1
- Red Hat Enterprise Linux AppStream EUS (v.8.8) compat-libpthread-nonshared-2.28-225.el8_8.11, glibc-utils-2.28-225.el8_8.11
- Red Hat Enterprise Linux BaseOS EUS (v.8.8) glibc-2.28-225.el8_8.11, glibc-all-langpacks-2.28-225.el8_8.11, glibc-common-2.28-225.el8_8.11 +47
- RHSA-2024:3309 Released 2024-05-23 · Red Hat rating Importantglibc security update
- Red Hat Enterprise Linux AppStream AUS (v.8.4) compat-libpthread-nonshared-2.28-151.el8_4.2, glibc-utils-2.28-151.el8_4.2
- Red Hat Enterprise Linux AppStream E4S (v.8.4) compat-libpthread-nonshared-2.28-151.el8_4.2, glibc-utils-2.28-151.el8_4.2
- Red Hat Enterprise Linux AppStream TUS (v.8.4) compat-libpthread-nonshared-2.28-151.el8_4.2, glibc-utils-2.28-151.el8_4.2
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) glibc-2.28-151.el8_4.2, glibc-all-langpacks-2.28-151.el8_4.2, glibc-common-2.28-151.el8_4.2 +47
- Red Hat Enterprise Linux BaseOS E4S (v.8.4) glibc-2.28-151.el8_4.2, glibc-all-langpacks-2.28-151.el8_4.2, glibc-common-2.28-151.el8_4.2 +47
- Red Hat Enterprise Linux BaseOS TUS (v.8.4) glibc-2.28-151.el8_4.2, glibc-all-langpacks-2.28-151.el8_4.2, glibc-common-2.28-151.el8_4.2 +47
- RHSA-2024:3269 Released 2024-05-22 · Red Hat rating Importantglibc security update
- Red Hat Enterprise Linux AppStream (v. 8) compat-libpthread-nonshared-2.28-251.el8_10.1, glibc-utils-2.28-251.el8_10.1
- Red Hat Enterprise Linux BaseOS (v. 8) glibc-2.28-251.el8_10.1, glibc-all-langpacks-2.28-251.el8_10.1, glibc-common-2.28-251.el8_10.1 +47
- Red Hat Enterprise Linux CRB (v. 8) glibc-benchtests-2.28-251.el8_10.1, glibc-nss-devel-2.28-251.el8_10.1, glibc-static-2.28-251.el8_10.1 +1
- RHSA-2024:2799 Released 2024-05-09 · Red Hat rating Importantglibc security update
- Red Hat CodeReady Linux Builder EUS (v.8.6) glibc-benchtests-2.28-189.10.el8_6, glibc-nss-devel-2.28-189.10.el8_6, glibc-static-2.28-189.10.el8_6 +1
- Red Hat Enterprise Linux AppStream EUS (v.8.6) compat-libpthread-nonshared-2.28-189.10.el8_6, glibc-utils-2.28-189.10.el8_6
- Red Hat Enterprise Linux BaseOS EUS (v.8.6) glibc-2.28-189.10.el8_6, glibc-all-langpacks-2.28-189.10.el8_6, glibc-common-2.28-189.10.el8_6 +47
- Red Hat Virtualization 4 Hypervisor for RHEL 8 glibc-devel-2.28-189.10.el8_6, glibc-headers-2.28-189.10.el8_6
- RHSA-2024:2722 Released 2024-05-07 · Red Hat rating Importantglibc security update
- Red Hat CodeReady Linux Builder (v. 8) glibc-benchtests-2.28-236.el8_9.13, glibc-nss-devel-2.28-236.el8_9.13, glibc-static-2.28-236.el8_9.13 +1
- Red Hat Enterprise Linux AppStream (v. 8) compat-libpthread-nonshared-2.28-236.el8_9.13, glibc-utils-2.28-236.el8_9.13
- Red Hat Enterprise Linux BaseOS (v. 8) glibc-2.28-236.el8_9.13, glibc-all-langpacks-2.28-236.el8_9.13, glibc-common-2.28-236.el8_9.13 +47
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Out of support scope |
| 9Base-Service-Interconnect-1.4 | Fixed | RHSA-2024:4126 |
| Red Hat CodeReady Linux Builder (v. 8) | Fixed | RHSA-2024:2722 |
| Red Hat CodeReady Linux Builder EUS (v.8.6) | Fixed | RHSA-2024:2799 |
| Red Hat CodeReady Linux Builder EUS (v.8.8) | Fixed | RHSA-2024:3312 |
| Red Hat CodeReady Linux Builder EUS (v.9.0) | Fixed | RHSA-2024:3423 |
| Red Hat CodeReady Linux Builder EUS (v.9.2) | Fixed | RHSA-2024:3411 |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2024:2722, RHSA-2024:3269 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2024:3339 |
| Red Hat Enterprise Linux AppStream AUS (v. 8.2) | Fixed | RHSA-2024:3464 |
| Red Hat Enterprise Linux AppStream AUS (v.8.4) | Fixed | RHSA-2024:3309 |
| Red Hat Enterprise Linux AppStream E4S (v.8.4) | Fixed | RHSA-2024:3309 |
| Red Hat Enterprise Linux AppStream EUS (v.8.6) | Fixed | RHSA-2024:2799 |
| Red Hat Enterprise Linux AppStream EUS (v.8.8) | Fixed | RHSA-2024:3312 |
| Red Hat Enterprise Linux AppStream EUS (v.9.0) | Fixed | RHSA-2024:3423 |
| Red Hat Enterprise Linux AppStream EUS (v.9.2) | Fixed | RHSA-2024:3411 |
| Red Hat Enterprise Linux AppStream TUS (v.8.4) | Fixed | RHSA-2024:3309 |
| Red Hat Enterprise Linux BaseOS (v. 8) | Fixed | RHSA-2024:2722, RHSA-2024:3269 |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | RHSA-2024:3339 |
| Red Hat Enterprise Linux BaseOS AUS (v. 8.2) | Fixed | RHSA-2024:3464 |
| Red Hat Enterprise Linux BaseOS AUS (v.8.4) | Fixed | RHSA-2024:3309 |
| Red Hat Enterprise Linux BaseOS E4S (v.8.4) | Fixed | RHSA-2024:3309 |
| Red Hat Enterprise Linux BaseOS EUS (v.8.6) | Fixed | RHSA-2024:2799 |
| Red Hat Enterprise Linux BaseOS EUS (v.8.8) | Fixed | RHSA-2024:3312 |
| Red Hat Enterprise Linux BaseOS EUS (v.9.0) | Fixed | RHSA-2024:3423 |
| Red Hat Enterprise Linux BaseOS EUS (v.9.2) | Fixed | RHSA-2024:3411 |
| Red Hat Enterprise Linux BaseOS TUS (v.8.4) | Fixed | RHSA-2024:3309 |
| Red Hat Enterprise Linux CRB (v. 8) | Fixed | RHSA-2024:3269 |
| Red Hat Enterprise Linux CRB (v. 9) | Fixed | RHSA-2024:3339 |
| Red Hat Enterprise Linux Client (v. 7) | Fixed | RHSA-2024:3588 |
| Red Hat Enterprise Linux Client Optional (v. 7) | Fixed | RHSA-2024:3588 |
| Red Hat Enterprise Linux ComputeNode Optional (v. 7) | Fixed | RHSA-2024:3588 |
| Red Hat Enterprise Linux Server (v. 7) | Fixed | RHSA-2024:3588 |
| Red Hat Enterprise Linux Server Optional (v. 7) | Fixed | RHSA-2024:3588 |
| Red Hat Enterprise Linux Workstation (v. 7) | Fixed | RHSA-2024:3588 |
| Red Hat Enterprise Linux Workstation Optional (v. 7) | Fixed | RHSA-2024:3588 |
| Red Hat OpenShift Container Platform 4.12 | Fixed | RHSA-2024:7590 |
| Red Hat OpenShift Container Platform 4.13 | Fixed | RHSA-2024:7939 |
| Red Hat OpenShift Container Platform 4.14 | Fixed | RHSA-2024:8235 |
| Red Hat OpenShift Container Platform 4.15 | Fixed | RHSA-2024:7594 |
| Red Hat OpenShift Container Platform 4.16 | Fixed | RHSA-2024:7599 |
| Red Hat Virtualization 4 Hypervisor for RHEL 8 | Fixed | RHSA-2024:2799 |
Not affected: 8 products
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat OpenShift Container Platform 4.12
- Red Hat OpenShift Container Platform 4.13
- Red Hat OpenShift Container Platform 4.14
- Red Hat OpenShift Container Platform 4.15
- Red Hat OpenShift Container Platform 4.16
Timeline
- 2026-10-02 Threatist record created from CVE-2024-2961
- 2026-10-03 Alias added: GHSA-22q4-f5r6-3xqw
- 2026-10-16 Affected versions changed · Red Hat
- 2026-11-03 CISA SSVC decision points changed
References
Advisory 13
- https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004
- http://www.openwall.com/lists/oss-security/2024/04/24/2
- http://www.openwall.com/lists/oss-security/2024/04/17/9
- http://www.openwall.com/lists/oss-security/2024/04/18/4
- https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html
- http://www.openwall.com/lists/oss-security/2024/05/27/2
- http://www.openwall.com/lists/oss-security/2024/05/27/6
- http://www.openwall.com/lists/oss-security/2024/05/27/1
- http://www.openwall.com/lists/oss-security/2024/05/27/4
- http://www.openwall.com/lists/oss-security/2024/05/27/5
- http://www.openwall.com/lists/oss-security/2024/05/27/3
- https://security.netapp.com/advisory/ntap-20240531-0002/
- http://www.openwall.com/lists/oss-security/2024/07/22/5
Other 3
- https://lists.fedoraproject.org/archives/list/[email protected]/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/
More GNU Glibc vulnerabilities
- TI-2023-04522 Glibc: buffer overflow in ld.so leading to privilege escalation KEVCVSS 3.1HIGH 7.8
- TI-2015-00205 Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and… CVSS 2.0HIGH 10.0
- TI-2026-04772 scanf %mc off-by-one heap buffer overflow CVSS 3.1CRITICAL 9.8
- TI-2022-07360 The deprecated compatibility function clnt_create in the sunrpc module of the GNU C… CVSS 3.1CRITICAL 9.8
- TI-2022-07359 The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C… CVSS 3.1CRITICAL 9.8
- TI-2015-06274 Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the… CVSS 3.0HIGH 8.1
Sources
- CVE-2024-2961 · CVE Program
- CVE-2024-2961 · NVD
- FIRST EPSS
- GHSA-22q4-f5r6-3xqw · GitHub Advisory Database · CC BY 4.0
- CVE-2024-2961 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences