CVE-2024-2961
highThe iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the I…
Vendor / product: Gnu — glibc
The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.
CVSS
7.3
7.3 (CVSS v3.1)
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H Severity source: NVD CVSS v3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
Timeline (UTC)
Published: 2024-04-17 18:15
Modified: 2026-11-03 22:17
NVD status: Undergoing Analysis
Last synced 10 hours ago
Verified against the source API 2026-11-03 22:24 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
gnu / glibc ≥2.1.93 <2.40
netapp / active_iq_unified_manager all versions
debian / debian_linux 10.0
netapp / hci_h300s_firmware all versions
netapp / hci_h500s_firmware all versions
netapp / hci_h700s_firmware all versions
netapp / hci_h410s_firmware all versions
netapp / hci_h410c_firmware all versions
netapp / hci_h610c_firmware all versions
netapp / hci_h610s_firmware all versions
netapp / hci_h615c_firmware all versions
netapp / hci_compute_node all versions
netapp / ontap_select_deploy_administration_utility all versions
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- http://www.openwall.com/lists/oss-security/2024/04/17/9 3ff69d7a-14f2-4f67-a097-88dee7810d18
- http://www.openwall.com/lists/oss-security/2024/04/18/4 3ff69d7a-14f2-4f67-a097-88dee7810d18
- http://www.openwall.com/lists/oss-security/2024/04/24/2 3ff69d7a-14f2-4f67-a097-88dee7810d18
- http://www.openwall.com/lists/oss-security/2024/05/27/1 3ff69d7a-14f2-4f67-a097-88dee7810d18
- http://www.openwall.com/lists/oss-security/2024/05/27/2 3ff69d7a-14f2-4f67-a097-88dee7810d18
- http://www.openwall.com/lists/oss-security/2024/05/27/3 3ff69d7a-14f2-4f67-a097-88dee7810d18
- http://www.openwall.com/lists/oss-security/2024/05/27/4 3ff69d7a-14f2-4f67-a097-88dee7810d18
- http://www.openwall.com/lists/oss-security/2024/05/27/5 3ff69d7a-14f2-4f67-a097-88dee7810d18
- http://www.openwall.com/lists/oss-security/2024/05/27/6 3ff69d7a-14f2-4f67-a097-88dee7810d18
- http://www.openwall.com/lists/oss-security/2024/07/22/5 3ff69d7a-14f2-4f67-a097-88dee7810d18
- https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html 3ff69d7a-14f2-4f67-a097-88dee7810d18
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/mes... 3ff69d7a-14f2-4f67-a097-88dee7810d18
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/mes... 3ff69d7a-14f2-4f67-a097-88dee7810d18
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/mes... 3ff69d7a-14f2-4f67-a097-88dee7810d18
- https://security.netapp.com/advisory/ntap-20240531-0002/ 3ff69d7a-14f2-4f67-a097-88dee7810d18
- https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004 3ff69d7a-14f2-4f67-a097-88dee7810d18
- http://www.openwall.com/lists/oss-security/2024/04/17/9 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2024/04/18/4 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2024/04/24/2 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2024/05/27/1 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2024/05/27/2 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2024/05/27/3 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2024/05/27/4 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2024/05/27/5 af854a3a-2127-422b-91ae-364da2661108
- http://www.openwall.com/lists/oss-security/2024/05/27/6 af854a3a-2127-422b-91ae-364da2661108
Data sources
NVD CVE API 2.0 — fetched 2026-11-03 22:24 UTC · record ↗