CVE-2024-2961

2024-04-1700:00:00

ubuntu.com

iconv plugin

iso-2022-cn-ext

oob write

ucs4

unix

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.7%

JSON

The iconv() function in the GNU C Library versions 2.39 and older may
overflow the output buffer passed to it by up to 4 bytes when converting
strings to the ISO-2022-CN-EXT character set, which may be used to crash an
application or overwrite a neighbouring variable.

Notes

Author	Note
leosilva	introduced in 755104edc (v2.1.94)

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarcheglibc< 2.19-0ubuntu6.15+esm3) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu18.04noarchglibc< 2.27-3ubuntu1.6+esm2) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu20.04noarchglibc< 2.31-0ubuntu9.15UNKNOWN
ubuntu22.04noarchglibc< 2.35-0ubuntu3.7UNKNOWN
ubuntu23.10noarchglibc< 2.38-1ubuntu6.2UNKNOWN
ubuntu24.04noarchglibc< 2.39-0ubuntu8.1UNKNOWN
ubuntu16.04noarchglibc< 2.23-0ubuntu11.3+esm6) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	14.04	noarch	eglibc	< 2.19-0ubuntu6.15+esm3) Available with Ubuntu Pro or Ubuntu Pro (Infra-only	UNKNOWN
ubuntu	18.04	noarch	glibc	< 2.27-3ubuntu1.6+esm2) Available with Ubuntu Pro or Ubuntu Pro (Infra-only	UNKNOWN
ubuntu	20.04	noarch	glibc	< 2.31-0ubuntu9.15	UNKNOWN
ubuntu	22.04	noarch	glibc	< 2.35-0ubuntu3.7	UNKNOWN
ubuntu	23.10	noarch	glibc	< 2.38-1ubuntu6.2	UNKNOWN
ubuntu	24.04	noarch	glibc	< 2.39-0ubuntu8.1	UNKNOWN
ubuntu	16.04	noarch	glibc	< 2.23-0ubuntu11.3+esm6) Available with Ubuntu Pro or Ubuntu Pro (Infra-only	UNKNOWN