CVE-2024-2961: The GNU C Library security advisories update for 2024-04-17: GLIBC-SA-2024-0004/CVE-2024-2961: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence
GNU C Library could allow a remote attacker to execute arbitrary code on the system, caused by an out-of-bounds write in the ISO-2022-CN-EXT plugin. By sending specially crafted input, an attacker could exploit this vulnerability to overwrite critical data structures and execute arbitrary code on the system or cause the application to crash.
Other sources
The iconv plugin ISO-2022-CN-EXT, when converting from UCS4, might trigger a OOB write. The encoding requires to add escape sequence to indicate where it changes the character set (as described by RFC 1922) and while the bounds check is done by the SOdesignation designation, it is missing for SS2designation and SS3designation. This leads to an overflow of 1, 2, or 3 bytes with fixed values: $+I, $+J, $+K, $+L, $+M, or , $H.
— Red Hat
The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2961?
CVE-2024-2961 is considered a critical vulnerability due to its potential for remote code execution.
How can CVE-2024-2961 be exploited?
CVE-2024-2961 can be exploited by sending specially crafted input to the affected system, causing an out-of-bounds write.
What software is affected by CVE-2024-2961?
CVE-2024-2961 affects IBM Security Verify Governance, Identity Manager software and its virtual appliance, as well as specific versions of the glibc package in Debian.
How do I fix CVE-2024-2961?
To fix CVE-2024-2961, update to the latest patched versions of affected software and libraries as specified by your vendor.
Is there a workaround for CVE-2024-2961 until a patch is applied?
Currently, there is no publicly documented workaround for CVE-2024-2961; applying the patch is strongly recommended.