CVE-2024-2961
HIGH 17 PoCs
ACT NOW
Priority: 6.45
BB Relevance:
70/100
Published: 2024-04-17
Modified: 2026-11-04
First seen: 2026-11-03
Status: active
Attack Surface
Low Complexity
No Auth
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
Low
I:
Low
A:
High
Description
The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.
Weakness Classification (1)
Affected Software (15)
| Vendor | Product | Version |
|---|---|---|
| The GNU C Library | glibc | 2.1.93 < 2.40 |
| The GNU C Library | glibc | 2.1.93 < 2.40 |
| debian | debian_linux | 10.0 |
| gnu | glibc | 2.1.93 – 2.40 |
| netapp | active_iq_unified_manager | - |
| netapp | hci_compute_node | - |
| netapp | hci_h300s_firmware | - |
| netapp | hci_h410c_firmware | - |
| netapp | hci_h410s_firmware | - |
| netapp | hci_h500s_firmware | - |
| netapp | hci_h610c_firmware | - |
| netapp | hci_h610s_firmware | - |
| netapp | hci_h615c_firmware | - |
| netapp | hci_h700s_firmware | - |
| netapp | ontap_select_deploy_administration_utility | - |
References & Advisories (20)
Broken Link
Broken Link
Broken Link