High severity7.3NVD Advisory· Published Apr 17, 2024· Updated May 12, 2026
CVE-2024-2961
CVE-2024-2961
Description
The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.
Affected products
13- cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
- cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:hci_compute_node:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:hci_h300s_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:hci_h410c_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:hci_h410s_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:hci_h500s_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:hci_h610c_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:hci_h610s_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:hci_h615c_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:netapp:hci_h700s_firmware:-:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
19- www.openwall.com/lists/oss-security/2024/04/17/9nvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2024/04/18/4nvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2024/04/24/2nvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2024/05/27/1nvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2024/05/27/2nvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2024/05/27/3nvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2024/05/27/4nvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2024/05/27/5nvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2024/05/27/6nvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2024/07/22/5nvdMailing ListThird Party Advisory
- lists.debian.org/debian-lts-announce/2024/05/msg00001.htmlnvdMailing ListThird Party Advisory
- security.netapp.com/advisory/ntap-20240531-0002/nvdThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/nvdBroken Link
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/nvdBroken Link
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/nvdBroken Link
- www.ambionics.io/blog/iconv-cve-2024-2961-p1nvdBroken Link
- www.ambionics.io/blog/iconv-cve-2024-2961-p2nvdBroken Link
- www.ambionics.io/blog/iconv-cve-2024-2961-p3nvdBroken Link
- cert-portal.siemens.com/productcert/html/ssa-082556.htmlnvd
News mentions
0No linked articles in our index yet.