CVE-2024-2961

The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.

The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.

Security Fix(es):

The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable. (CVE-2024-2961)

The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.

Security Fix(es):

The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable. (CVE-2024-2961)

The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational facilities as open, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt, login, exit and more.

Security Fix(es):

The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable. (CVE-2024-2961)

The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

• glibc: Out of bounds write in iconv may lead to remote code execution (CVE-2024-2961)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

• glibc: Out of bounds write in iconv may lead to remote code execution (CVE-2024-2961)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

• glibc: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (CVE-2024-2961)
• glibc: stack-based buffer overflow in netgroup cache (CVE-2024-33599)
• glibc: null pointer dereferences after failed netgroup cache insertion (CVE-2024-33600)
• glibc: netgroup cache may terminate daemon on memory allocation failure (CVE-2024-33601)
• glibc: netgroup cache assumes NSS callback uses in-buffer strings (CVE-2024-33602)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

• SECURITY UPDATE: buffer overflow in iconv() function when converting to ISO-2022-CN-EXT character set
  • debian/patches/any/CVE-2024-2961.patch: fix out-of-bound writes in ISO-2022-CN-EXT escape sequences
  • CVE-2024-2961

• CVE-2018-11236: fix stack buffer overflow when realpath() input length is close to SSIZE_MAX.
• CVE-2024-2961: fix out-of-bound writes in ISO-2022-CN-EXT escape sequences

• CVE-2018-11236: fix stack buffer overflow when realpath() input length is close to SSIZE_MAX.
• CVE-2024-2961: fix out-of-bound writes in ISO-2022-CN-EXT escape sequences

• CVE-2024-2961: Fix buffer overflow issue in iconv() function when converting strings to ISO-2022-CN-EXT character set
• CVE-2024-33599: Fix buffer overflow in netgroup cache

• CVE-2024-2961: Fix buffer overflow issue in iconv() function when converting strings to ISO-2022-CN-EXT character set

• CVE-2024-2961: Fix buffer overflow issue in iconv() function when converting strings to ISO-2022-CN-EXT character set

• CVE-2024-2961: fix buffer overflow issue in iconv() function when converting strings to ISO-2022-CN-EXT character set
• CVE-2024-33599: fix buffer overflow in netgroup cache

• SECURITY UPDATE: Buffer overflow in iconv() function when converting to ISO-2022-CN-EXT character set
  • debian/patches/any/CVE-2024-2961.patch: Fix out-of-bound writes in ISO-2022-CN-EXT escape sequences
  • CVE-2024-2961
• SECURITY UPDATE: stack-based buffer overflow in netgroup cache
  • debian/patches/any/CVE-2024-33599.patch: fix buffer overflow in netgroup cache
  • CVE-2024-33599

The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable. (CVE-2024-2961)

fix possible security issue with library code slim/psr7 (CVE-2023-30536) fix possible security issue relating to iconv (CVE-2024-2961, PMASA-2025-3) fix an XSS vulnerability in the check tables feature (PMASA-2025-1) fix an XSS vulnerability in the Insert tab (PMASA-2025-2)

These are all security issues fixed in the glibc-2.39-5.1 package on the GA media of openSUSE Tumbleweed.

This update for phpMyAdmin fixes the following issues:

Update to version 5.2.2:

• CVE-2025-24530: XSS in the 'Check Tables' feature (bsc#1236312).
• CVE-2025-24529: XSS in the 'Insert' tab (bsc#1236311).
• CVE-2024-2961: glibc/iconv: out-of-bounds writes when writing escape sequences (bsc#1222992).
• CVE-2023-30536: slim/psr7: improper header validation (bsc#1238159).

These are all security issues fixed in the phpMyAdmin-5.2.2-1.1 package on the GA media of openSUSE Tumbleweed.

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

• glibc: Out of bounds write in iconv may lead to remote code execution (CVE-2024-2961)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

• glibc: Out of bounds write in iconv may lead to remote code execution (CVE-2024-2961)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly.

Security Fix(es):

• glibc: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (CVE-2024-2961)

• glibc: stack-based buffer overflow in netgroup cache (CVE-2024-33599)

• glibc: null pointer dereferences after failed netgroup cache insertion (CVE-2024-33600)

• glibc: netgroup cache may terminate daemon on memory allocation failure (CVE-2024-33601)

• glibc: netgroup cache assumes NSS callback uses in-buffer strings (CVE-2024-33602)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This update for glibc fixes the following issues:

• iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961, bsc#1222992)

This update for glibc fixes the following issues:

• nscd: Fixed use-after-free in addgetnetgrentX (BZ #23520)
• CVE-2024-33599: nscd: Fixed Stack-based buffer overflow in netgroup cache (bsc#1223423, BZ #31677)
• CVE-2024-33600: nscd: Avoid null pointer crashes after notfound response (bsc#1223424, BZ #31678)
• CVE-2024-33600: nscd: Do not send missing not-found response in addgetnetgrentX (bsc#1223424, BZ #31678)
• CVE-2024-33602: netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601, bsc#1223425, BZ #31680)
• CVE-2024-33602; Use time_t for return type of addgetnetgrentX (bsc#1223425)
• CVE-2024-2961: iconv: ISO-2022-CN-EXT: Fixed out-of-bound writes when writing escape sequence (bsc#1222992)

This update for glibc fixes the following issues:

• CVE-2024-2961: iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (bsc#1222992)

This update for glibc-livepatches fixes the following issues:

• CVE-2024-2961: Fixed that the iconv() function in the GNU C Library may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set (bsc#1223019).

This update for glibc fixes the following issues:

• nscd: Release read lock after resetting timeout
• nscd: Fix use-after-free in addgetnetgrentX (BZ #23520)
• CVE-2024-33599; nscd: Stack-based buffer overflow in netgroup cache (bsc#1223423, BZ #31677)
• CVE-2024-33600; nscd: Avoid null pointer crashes after notfound response (bsc#1223424, BZ #31678)
• CVE-2024-33600: nscd: Do not send missing not-found response in addgetnetgrentX (bsc#1223424, BZ #31678)
• CVE-2024-33601, CVE-2024-33602: netgroup: Use two buffers in addgetnetgrentX (bsc#1223425, BZ #31680)
• CVE-2024-33602: Use time_t for return type of addgetnetgrentX (bsc#1223425)
• CVE-2024-2961: iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (bsc#1222992)

This update for glibc fixes the following issues:

Fixed security issues:

• CVE-2024-33602: Use time_t for return type of addgetnetgrentX (bsc#1223425)
• CVE-2024-33599: nscd: Stack-based buffer overflow in netgroup cache (bsc#1223423)
• CVE-2024-33600: nscd: Avoid null pointer crashes after notfound response (bsc#1223424)
• CVE-2024-33600: nscd: Do not send missing not-found response in addgetnetgrentX (bsc#1223424)
• CVE-2024-33601, CVE-2024-33602: netgroup: Use two buffers in addgetnetgrentX (bsc#1223425)
• CVE-2024-2961: iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (bsc#1222992)

Fixed non-security issues:

• Add workaround for invalid use of libc_nonshared.a with non-SUSE libc (bsc#1221482)
• Fix segfault in wcsncmp (bsc#1228041)
• Also include stat64 in the 32-bit libc_nonshared.a workaround (bsc#1221482)
• Avoid creating ULP prologue for _start routine (bsc#1221940)
• Also add libc_nonshared.a workaround to 32-bit x86 compat package (bsc#1221482)
• malloc: Use __get_nprocs on arena_get2
• linux: Use rseq area unconditionally in sched_getcpu

Charles Fol discovered that the GNU C Library iconv feature incorrectly handled certain input sequences. An attacker could use this issue to cause the GNU C Library to crash, resulting in a denial of service, or possibly execute arbitrary code.

USN-6737-1 fixed a vulnerability in the GNU C Library. This update provides the corresponding update for Ubuntu 24.04 LTS.

Original advisory details:

Charles Fol discovered that the GNU C Library iconv feature incorrectly handled certain input sequences. An attacker could use this issue to cause the GNU C Library to crash, resulting in a denial of service, or possibly execute arbitrary code.

It was discovered that GNU C Library incorrectly handled netgroup requests. An attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-9984)

It was discovered that GNU C Library might allow context-dependent attackers to cause a denial of service. This issue only affected Ubuntu 14.04 LTS. (CVE-2015-20109)

It was discovered that GNU C Library when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution. This issue only affected Ubuntu 14.04 LTS. (CVE-2018-11236)

It was discovered that the GNU C library getcwd function incorrectly handled buffers. An attacker could use this issue to cause the GNU C Library to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2021-3999)

Charles Fol discovered that the GNU C Library iconv feature incorrectly handled certain input sequences. An attacker could use this issue to cause the GNU C Library to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2024-2961)