GNU C Library up to 2.39 iconv out-of-bounds write

Summaryinfo

A vulnerability categorized as critical has been discovered in GNU C Library up to 2.39. The affected element is the function iconv. Executing a manipulation can lead to out-of-bounds write. This vulnerability appears as CVE-2024-2961. The attack requires local access. In addition, an exploit is available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability classified as critical was found in GNU C Library up to 2.39. This vulnerability affects the function iconv. The manipulation with an unknown input leads to a out-of-bounds write vulnerability. The CWE definition for the vulnerability is CWE-787. The product writes data past the end, or before the beginning, of the intended buffer. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.

The weakness was presented by Charles Fol. The advisory is shared for download at sourceware.org. This vulnerability was named CVE-2024-2961 since 03/26/2024. The exploitation appears to be easy. The attack needs to be approached locally. Technical details and also a public exploit are known.

It is possible to download the exploit at packetstormsecurity.com. It is declared as highly functional. The vulnerability scanner Nessus provides a plugin with the ID 214840 (Fedora 40 : phpMyAdmin (2025-c17ef0f176)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 2.40 eliminates this vulnerability.

The vulnerability is also documented in the databases at Tenable (214840) and CERT Bund (WID-SEC-2024-0926). Once again VulDB remains the best source for vulnerability data.

Affected

• Debian Linux
• IBM DataPower Gateway
• Amazon Linux 2
• Red Hat Enterprise Linux
• Fedora Linux
• Ubuntu Linux
• SUSE Linux
• Oracle Linux
• Gentoo Linux
• EMC Avamar
• IBM Security Guardium
• Dell NetWorker
• Red Hat OpenShift
• Siemens SIMATIC S7
• RESF Rocky Linux
• IBM App Connect Enterprise
• Open Source GNU libc
• Broadcom Brocade SANnav
• IBM MQ
• IBM QRadar SIEM
• Dell Avamar
• Open Source phpMyAdmin
• Dell integrated Dell Remote Access Controller

Productinfo

Type

• Software Library

Vendor

• GNU

Name

• C Library

Version

• 2.0
• 2.1
• 2.2
• 2.3
• 2.4
• 2.5
• 2.6
• 2.7
• 2.8
• 2.9
• 2.10
• 2.11
• 2.12
• 2.13
• 2.14
• 2.15
• 2.16
• 2.17
• 2.18
• 2.19
• 2.20
• 2.21
• 2.22
• 2.23
• 2.24
• 2.25
• 2.26
• 2.27
• 2.28
• 2.29
• 2.30
• 2.31
• 2.32
• 2.33
• 2.34
• 2.35
• 2.36
• 2.37
• 2.38
• 2.39

License

• open-source

Website

• Vendor: https://www.gnu.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion