ID:9582 - Exploit for Heap-based buffer overflow in coreutils - CVE-2024-0684

 
Main Vulnerability Database Exploits ID:9582 - Exploit for Heap-based buffer overflow in coreutils - CVE-2024-0684

ID:9582 - Exploit for Heap-based buffer overflow in coreutils - CVE-2024-0684

Published: March 4, 2024


Vulnerability identifier: #VU85620
Vulnerability risk: Low
CVE-ID: CVE-2024-0684
CWE-ID: CWE-122
Exploitation vector: Remote access
Vulnerable software:
coreutils

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error within the line_bytes_split() function. A remote attacker can pass specially crafted input to the application, trigger a heap overflow and perform a denial of service (DoS) attack.


Remediation

Install updates from vendor's website.