Bug 931308

Summary:	CVE-2024-2961 sys-libs/ glibc buffer overflow leading to remote code execution
Product:	Gentoo Security	Reporter:	pord <gordon.parton>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	critical
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description pord 2024-05-06 16:10:24 UTC

Description
The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.

Comment 1 Sam James archtester

2024-05-06 16:17:05 UTC


*** This bug has been marked as a duplicate of bug 930177 ***