Buffer overflow in GNU C Library (glibc) - CVE-2024-2961

Vulnerability identifier: #VU88822

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-2961

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: The vulnerability is being exploited in the wild

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the iconv() function when converting string to the ISO-2022-CN-EXT character set. A remote attacker can pass specially crafted input to the application, trigger a 4 byte buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

GNU C Library (glibc)
Gentoo Linux
Debian Linux
Amazon Linux AMI
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 11
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Micro
Anolis OS
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Fedora
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
Slackware Linux
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Live Patching
openSUSE Leap
openEuler
Ubuntu
PowerStore 9000X
PowerStore 7000X
PowerStore 5000X
PowerStore 3000X
PowerStore 1000X
SmartFabric Storage Software
PowerStoreX OS
Precision 7920 XL Rack
Precision 7920 Rack
Voice Gateway
Cloud Pak for Network Automation
Guardium Data Security Center (GDSC)
IBM Business Automation Manager Open Editions
SmartFabric OS10
webMethods Managed File Transfer
Data Observability by Databand Self-Hosted
PowerStore T
IBM OS Image for Red Hat Linux Systems
watsonx Assistant Cartridge
watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component
Storage Ceph
Storage Virtualize
IBM supplied MQ Advanced container images
HPE OneView
EMC Cloud Tiering Appliance
phpMyAdmin
iDRAC9
RSA Authentication Manager
IBM Edge Application Manager
Traffix SDC
Red Hat OpenShift Container Platform
IBM DataPower Gateway
RecoverPoint for Virtual Machines
IBM Qradar SIEM
Juniper Secure Analytics (JSA)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
glibc-livepatches-debuginfo
glibc-livepatches-debugsource
glibc-livepatches
glibc-devel
glibc-info
glibc-debuginfo
glibc-html
glibc-32bit
glibc-profile
nscd
glibc-locale-32bit
glibc
glibc-debuginfo-32bit
glibc-devel-32bit
glibc-locale
glibc-debugsource
glibc-i18ndata
glibc-profile-32bit
glibc-utils
glibc-static
glibc-headers
glibc-common
glibc (Red Hat package)
nscd-debuginfo
glibc-locale-debuginfo
glibc-devel-static
glibc-devel-debuginfo-32bit
glibc-locale-debuginfo-32bit
glibc-devel-debuginfo
glibc-locale-base-32bit-debuginfo
glibc-devel-32bit-debuginfo
glibc-locale-base-32bit
glibc-32bit-debuginfo
glibc-extra
glibc-extra-debuginfo
glibc-locale-base-debuginfo
glibc-locale-base
glibc-utils-debuginfo
glibc-utils-src-debugsource
glibc-utils-src
glibc-nss-devel
glibc-debugutils
libnsl
glibc-benchtests
nss_modules
glibc-help
glibc-all-langpacks
glibc-locale-source
glibc-compat-2.17
glibc-langpack-mjw
glibc-langpack-nr
glibc-langpack-miq
glibc-langpack-mi
glibc-langpack-oc
glibc-langpack-or
glibc-langpack-mhr
glibc-langpack-om
glibc-langpack-mg
glibc-langpack-mfe
glibc-langpack-mai
glibc-langpack-mag
glibc-langpack-lzh
glibc-langpack-lv
glibc-langpack-lt
glibc-langpack-lo
glibc-langpack-ln
glibc-langpack-lij
glibc-langpack-nds
glibc-langpack-mt
glibc-langpack-ms
glibc-langpack-my
glibc-langpack-nan
glibc-langpack-mr
glibc-langpack-mni
glibc-langpack-mn
glibc-langpack-nb
glibc-langpack-mk
glibc-langpack-ne
glibc-langpack-ga
glibc-langpack-nhn
glibc-langpack-niu
glibc-langpack-nl
glibc-langpack-nn
glibc-langpack-nso
glibc-langpack-ml
glibc-langpack-hi
glibc-langpack-id
glibc-langpack-ia
glibc-langpack-hy
glibc-langpack-hu
glibc-langpack-ht
glibc-langpack-hsb
glibc-langpack-hr
glibc-langpack-hne
glibc-langpack-hif
glibc-langpack-ig
glibc-langpack-he
glibc-langpack-hak
glibc-langpack-ha
glibc-langpack-gv
glibc-langpack-gu
glibc-langpack-gl
glibc-langpack-gez
glibc-langpack-gd
glibc-langpack-bo
glibc-langpack-km
glibc-langpack-lg
glibc-langpack-lb
glibc-langpack-ky
glibc-langpack-kw
glibc-langpack-ku
glibc-langpack-ks
glibc-langpack-kok
glibc-langpack-ko
glibc-langpack-kn
glibc-langpack-li
glibc-langpack-kl
glibc-langpack-kk
glibc-langpack-kab
glibc-langpack-ka
glibc-langpack-ja
glibc-langpack-iu
glibc-langpack-it
glibc-langpack-is
glibc-langpack-ik
glibc-langpack-tt
glibc-langpack-wae
glibc-langpack-wa
glibc-langpack-vi
glibc-langpack-ve
glibc-langpack-uz
glibc-langpack-ur
glibc-langpack-unm
glibc-langpack-uk
glibc-langpack-ug
glibc-langpack-wal
glibc-langpack-ts
glibc-langpack-tr
glibc-langpack-tpi
glibc-langpack-to
glibc-langpack-tn
glibc-langpack-tl
glibc-langpack-tk
glibc-langpack-tig
glibc-langpack-ti
glibc-doc
nss_hesiod
nss_db
glibc-minimal-langpack
glibc-langpack-the
glibc-langpack-zu
glibc-langpack-zh
glibc-langpack-yuw
glibc-langpack-yue
glibc-langpack-yo
glibc-langpack-yi
glibc-langpack-xh
glibc-langpack-wo
glibc-langpack-ru
glibc-langpack-shn
glibc-langpack-sgs
glibc-langpack-se
glibc-langpack-sd
glibc-langpack-sc
glibc-langpack-sat
glibc-langpack-sah
glibc-langpack-sa
glibc-langpack-rw
glibc-langpack-shs
glibc-langpack-ro
glibc-langpack-raj
glibc-langpack-quz
glibc-langpack-pt
glibc-langpack-ps
glibc-langpack-pl
glibc-langpack-pap
glibc-langpack-pa
glibc-langpack-ss
glibc-langpack-th
glibc-langpack-tg
glibc-langpack-te
glibc-langpack-tcy
glibc-langpack-ta
glibc-langpack-szl
glibc-langpack-sw
glibc-langpack-sv
glibc-langpack-st
glibc-langpack-os
glibc-langpack-sr
glibc-langpack-sq
glibc-langpack-so
glibc-langpack-sm
glibc-langpack-sl
glibc-langpack-sk
glibc-langpack-sid
glibc-langpack-si
glibc-langpack-an
glibc-langpack-brx
glibc-langpack-br
glibc-langpack-bi
glibc-langpack-bho
glibc-langpack-bhb
glibc-langpack-bg
glibc-langpack-ber
glibc-langpack-bem
glibc-langpack-be
glibc-langpack-az
glibc-langpack-ayc
glibc-langpack-ast
glibc-langpack-as
glibc-langpack-ar
glibc-langpack-anp
glibc-langpack-bn
glibc-langpack-am
glibc-langpack-ak
glibc-langpack-agr
glibc-langpack-af
glibc-langpack-aa
glibc-gconv-extra
compat-libpthread-nonshared
glibc-langpack-fy
glibc-langpack-el
glibc-langpack-fur
glibc-langpack-fr
glibc-langpack-fo
glibc-langpack-fil
glibc-langpack-fi
glibc-langpack-ff
glibc-langpack-fa
glibc-langpack-eu
glibc-langpack-et
glibc-langpack-es
glibc-langpack-eo
glibc-langpack-en
glibc-langpack-bs
glibc-langpack-dz
glibc-langpack-dv
glibc-langpack-ce
glibc-langpack-byn
glibc-langpack-ca
glibc-langpack-dsb
glibc-langpack-chr
glibc-langpack-cmn
glibc-langpack-crh
glibc-langpack-cs
glibc-langpack-csb
glibc-langpack-cv
glibc-langpack-cy
glibc-langpack-da
glibc-langpack-de
glibc-langpack-doi
libc6 (Ubuntu package)
glibc (Debian package)
aaa_glibc-solibs
glibc-i18n
glibc-locale-archive
sys-libs/glibc
phpMyAdmin
Juniper Junos Space
Oracle Communications Cloud Native Core Unified Data Repository
OpenShift API for Data Protection (OADP)
Network Observability plugin for the Openshift Console
Service Interconnect
IBM MQ Operator
Ansible Automation Platform
Red Hat Advanced Cluster Management for Kubernetes
Red Hat OpenShift Dev Spaces
Red Hat Advanced Cluster Security for Kubernetes
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
App Connect Enterprise Certified Container
Dell Secure Connect Gateway
Red Hat Migration Toolkit for Applications
Session Smart Router
IBM Security Verify Governance
IBM Workload Scheduler
Red Hat OpenStack
IBM Cloud Pak for Business Automation
Red Hat build of Keycloak
Red Hat OpenShift GitOps
IBM Integrated Analytics System
IBM Cloud Pak System
OpenShift Service Mesh
OpenShift Virtualization
OpenShift Container Platform for Windows Containers
IBM Storage Scale System
AMQ Broker
Dell EMC VxRail Appliance
IBM Security Guardium

Install updates from vendor's website.

Voice Gateway - update to 1.0.8.12
SmartFabric Storage Software - update to 1.4.3
Cloud Pak for Network Automation - update to 2.7.4
Guardium Data Security Center (GDSC) - update to 3.7.2
phpMyAdmin - update to 5.2.2
RecoverPoint for Virtual Machines - update to 6.0 SP2 P1
Juniper Secure Analytics (JSA) - update to 7.5.0 UP9 IF02
IBM Business Automation Manager Open Editions - update to 9.1.1
SmartFabric OS10 - update to 10.5.5.10
Juniper Junos Space - update to 24.1R3
glibc-livepatches-debuginfo - update to 0.1-150400.3.3.1
glibc-livepatches-debugsource - update to 0.1-150400.3.3.1
glibc-livepatches - update to 0.1-150400.3.3.1
Data Observability by Databand Self-Hosted - update to 1.0.132.1
OpenShift API for Data Protection (OADP) - update to 1.3.2
Service Interconnect - addressed in versions 1.4.5, 1.5.4
Network Observability plugin for the Openshift Console - update to 1.6.0
Red Hat OpenShift GitOps - addressed in versions 1.10.6, 1.11.4, 1.11.5, 1.12.3, 1.12.4
IBM MQ Operator - addressed in versions 2.0.22, 3.1.3
IBM Cloud Pak System - update to 2.3.4.1
Ansible Automation Platform - update to 2.4
OpenShift Service Mesh - addressed in versions 2.4.8, 2.5.2
Red Hat Advanced Cluster Management for Kubernetes - update to 2.10.4
glibc-devel - addressed in versions 2.11.3-17.110.52.1, 2.22-114.34.1, 2.26-150000.13.73.1
glibc-info - addressed in versions 2.11.3-17.110.52.1, 2.22-114.34.1, 2.26-150000.13.73.1
glibc-debuginfo - addressed in versions 2.11.3-17.110.52.1, 2.22-114.34.1, 2.26-150000.13.73.1
glibc-html - addressed in versions 2.11.3-17.110.52.1, 2.22-114.34.1
glibc-32bit - addressed in versions 2.11.3-17.110.52.1, 2.22-114.34.1, 2.26-150000.13.73.1
glibc-profile - addressed in versions 2.11.3-17.110.52.1, 2.22-114.34.1, 2.26-150000.13.73.1
nscd - addressed in versions 2.11.3-17.110.52.1, 2.22-114.34.1, 2.26-150000.13.73.1
glibc-locale-32bit - addressed in versions 2.11.3-17.110.52.1, 2.22-114.34.1
glibc - addressed in versions 2.11.3-17.110.52.1, 2.22-114.34.1, 2.26-150000.13.73.1
glibc-debuginfo-32bit - addressed in versions 2.11.3-17.110.52.1, 2.22-114.34.1
glibc-devel-32bit - addressed in versions 2.11.3-17.110.52.1, 2.22-114.34.1, 2.26-150000.13.73.1
glibc-locale - addressed in versions 2.11.3-17.110.52.1, 2.22-114.34.1, 2.26-150000.13.73.1
glibc-debugsource - addressed in versions 2.11.3-17.110.52.1, 2.22-114.34.1, 2.26-150000.13.73.1
glibc-i18ndata - addressed in versions 2.11.3-17.110.52.1, 2.22-114.34.1, 2.26-150000.13.73.1
glibc-profile-32bit - addressed in versions 2.11.3-17.110.52.1, 2.22-114.34.1
glibc - addressed in versions 2.17-324.190, 2.34-52
nscd - addressed in versions 2.17-326, 2.28-251.0.1
glibc-utils - addressed in versions 2.17-326, 2.28-251.0.1, 2.38-3
glibc-static - addressed in versions 2.17-326, 2.28-251.0.1, 2.38-3
glibc - addressed in versions 2.17-326, 2.28-251.0.1, 2.38-3
glibc-headers - addressed in versions 2.17-326, 2.28-251.0.1
glibc-common - addressed in versions 2.17-326, 2.28-251.0.1, 2.38-3
glibc-devel - addressed in versions 2.17-326, 2.28-251.0.1, 2.38-3
glibc (Red Hat package) - addressed in versions 2.17-326.el7_9.3, 2.28-101.el8_2.2, 2.28-151.el8_4.2, 2.28-189.10.el8_6, 2.28-225.el8_8.11, 2.28-236.el8_9.13, 2.28-251.el8_10.1, 2.34-28.el9_0.6, 2.34-60.el9_2.14, 2.34-100.el9_4.2
nscd-debuginfo - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc-locale-debuginfo - update to 2.22-114.34.1
glibc-devel-static - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc-devel-debuginfo-32bit - update to 2.22-114.34.1
glibc-locale-debuginfo-32bit - update to 2.22-114.34.1
glibc-devel-debuginfo - addressed in versions 2.22-114.34.1, 2.26-150000.13.73.1
glibc-locale-base-32bit-debuginfo - update to 2.26-150000.13.73.1
glibc-devel-32bit-debuginfo - update to 2.26-150000.13.73.1
glibc-locale-base-32bit - update to 2.26-150000.13.73.1
glibc-32bit-debuginfo - update to 2.26-150000.13.73.1
glibc-utils - update to 2.26-150000.13.73.1
glibc-extra - update to 2.26-150000.13.73.1
glibc-extra-debuginfo - update to 2.26-150000.13.73.1
glibc-locale-base-debuginfo - update to 2.26-150000.13.73.1
glibc-locale-base - update to 2.26-150000.13.73.1
glibc-utils-debuginfo - update to 2.26-150000.13.73.1
glibc-utils-src-debugsource - update to 2.26-150000.13.73.1
glibc-utils-src - update to 2.26-150000.13.73.1
glibc-nss-devel - addressed in versions 2.28-101, 2.34-150
glibc-debugutils - addressed in versions 2.28-101, 2.34-150
glibc - addressed in versions 2.28-101, 2.34-150
glibc-debuginfo - addressed in versions 2.28-101, 2.34-150
libnsl - addressed in versions 2.28-101, 2.34-150
nscd - addressed in versions 2.28-101, 2.34-150
glibc-benchtests - update to 2.28-101
nss_modules - addressed in versions 2.28-101, 2.34-150
glibc-help - addressed in versions 2.28-101, 2.34-150
glibc-debugsource - addressed in versions 2.28-101, 2.34-150
glibc-all-langpacks - addressed in versions 2.28-101, 2.34-150
glibc-locale-source - addressed in versions 2.28-101, 2.34-150
glibc-common - addressed in versions 2.28-101, 2.34-150
glibc-compat-2.17 - addressed in versions 2.28-101, 2.34-150
glibc-devel - addressed in versions 2.28-101, 2.34-150
glibc-langpack-mjw - update to 2.28-251.0.1
glibc-langpack-nr - update to 2.28-251.0.1
glibc-langpack-miq - update to 2.28-251.0.1
glibc-langpack-mi - update to 2.28-251.0.1
glibc-langpack-oc - update to 2.28-251.0.1
glibc-langpack-or - update to 2.28-251.0.1
glibc-langpack-mhr - update to 2.28-251.0.1
glibc-langpack-om - update to 2.28-251.0.1
glibc-langpack-mg - update to 2.28-251.0.1
glibc-langpack-mfe - update to 2.28-251.0.1
glibc-langpack-mai - update to 2.28-251.0.1
glibc-langpack-mag - update to 2.28-251.0.1
glibc-langpack-lzh - update to 2.28-251.0.1
glibc-langpack-lv - update to 2.28-251.0.1
glibc-langpack-lt - update to 2.28-251.0.1
glibc-langpack-lo - update to 2.28-251.0.1
glibc-langpack-ln - update to 2.28-251.0.1
glibc-langpack-lij - update to 2.28-251.0.1
glibc-langpack-nds - update to 2.28-251.0.1
glibc-langpack-mt - update to 2.28-251.0.1
glibc-langpack-ms - update to 2.28-251.0.1
glibc-langpack-my - update to 2.28-251.0.1
glibc-langpack-nan - update to 2.28-251.0.1
glibc-langpack-mr - update to 2.28-251.0.1
glibc-langpack-mni - update to 2.28-251.0.1
glibc-langpack-mn - update to 2.28-251.0.1
glibc-langpack-nb - update to 2.28-251.0.1
glibc-langpack-mk - update to 2.28-251.0.1
glibc-langpack-ne - update to 2.28-251.0.1
glibc-langpack-ga - update to 2.28-251.0.1
glibc-langpack-nhn - update to 2.28-251.0.1
glibc-langpack-niu - update to 2.28-251.0.1
glibc-langpack-nl - update to 2.28-251.0.1
glibc-langpack-nn - update to 2.28-251.0.1
glibc-langpack-nso - update to 2.28-251.0.1
glibc-langpack-ml - update to 2.28-251.0.1
glibc-langpack-hi - update to 2.28-251.0.1
glibc-langpack-id - update to 2.28-251.0.1
glibc-langpack-ia - update to 2.28-251.0.1
glibc-langpack-hy - update to 2.28-251.0.1
glibc-langpack-hu - update to 2.28-251.0.1
glibc-langpack-ht - update to 2.28-251.0.1
glibc-langpack-hsb - update to 2.28-251.0.1
glibc-langpack-hr - update to 2.28-251.0.1
glibc-langpack-hne - update to 2.28-251.0.1
glibc-langpack-hif - update to 2.28-251.0.1
glibc-langpack-ig - update to 2.28-251.0.1
glibc-langpack-he - update to 2.28-251.0.1
glibc-langpack-hak - update to 2.28-251.0.1
glibc-langpack-ha - update to 2.28-251.0.1
glibc-langpack-gv - update to 2.28-251.0.1
glibc-langpack-gu - update to 2.28-251.0.1
glibc-langpack-gl - update to 2.28-251.0.1
glibc-langpack-gez - update to 2.28-251.0.1
glibc-langpack-gd - update to 2.28-251.0.1
glibc-langpack-bo - update to 2.28-251.0.1
glibc-langpack-km - update to 2.28-251.0.1
glibc-langpack-lg - update to 2.28-251.0.1
glibc-langpack-lb - update to 2.28-251.0.1
glibc-langpack-ky - update to 2.28-251.0.1
glibc-langpack-kw - update to 2.28-251.0.1
glibc-langpack-ku - update to 2.28-251.0.1
glibc-langpack-ks - update to 2.28-251.0.1
glibc-langpack-kok - update to 2.28-251.0.1
glibc-langpack-ko - update to 2.28-251.0.1
glibc-langpack-kn - update to 2.28-251.0.1
glibc-langpack-li - update to 2.28-251.0.1
glibc-langpack-kl - update to 2.28-251.0.1
glibc-langpack-kk - update to 2.28-251.0.1
glibc-langpack-kab - update to 2.28-251.0.1
glibc-langpack-ka - update to 2.28-251.0.1
glibc-langpack-ja - update to 2.28-251.0.1
glibc-langpack-iu - update to 2.28-251.0.1
glibc-langpack-it - update to 2.28-251.0.1
glibc-langpack-is - update to 2.28-251.0.1
glibc-langpack-ik - update to 2.28-251.0.1
glibc-langpack-tt - update to 2.28-251.0.1
glibc-langpack-wae - update to 2.28-251.0.1
glibc-langpack-wa - update to 2.28-251.0.1
glibc-langpack-vi - update to 2.28-251.0.1
glibc-langpack-ve - update to 2.28-251.0.1
glibc-langpack-uz - update to 2.28-251.0.1
glibc-langpack-ur - update to 2.28-251.0.1
glibc-langpack-unm - update to 2.28-251.0.1
glibc-langpack-uk - update to 2.28-251.0.1
glibc-langpack-ug - update to 2.28-251.0.1
glibc-langpack-wal - update to 2.28-251.0.1
glibc-langpack-ts - update to 2.28-251.0.1
glibc-langpack-tr - update to 2.28-251.0.1
glibc-langpack-tpi - update to 2.28-251.0.1
glibc-langpack-to - update to 2.28-251.0.1
glibc-langpack-tn - update to 2.28-251.0.1
glibc-langpack-tl - update to 2.28-251.0.1
glibc-langpack-tk - update to 2.28-251.0.1
glibc-langpack-tig - update to 2.28-251.0.1
glibc-langpack-ti - update to 2.28-251.0.1
glibc-locale-source - addressed in versions 2.28-251.0.1, 2.38-3
glibc-doc - addressed in versions 2.28-251.0.1, 2.38-3
nss_hesiod - addressed in versions 2.28-251.0.1, 2.38-3
nss_db - addressed in versions 2.28-251.0.1, 2.38-3
libnsl - addressed in versions 2.28-251.0.1, 2.38-3
glibc-nss-devel - addressed in versions 2.28-251.0.1, 2.38-3
glibc-minimal-langpack - addressed in versions 2.28-251.0.1, 2.38-3
glibc-langpack-the - update to 2.28-251.0.1
glibc-langpack-zu - update to 2.28-251.0.1
glibc-langpack-zh - addressed in versions 2.28-251.0.1, 2.38-3
glibc-langpack-yuw - update to 2.28-251.0.1
glibc-langpack-yue - update to 2.28-251.0.1
glibc-langpack-yo - update to 2.28-251.0.1
glibc-langpack-yi - update to 2.28-251.0.1
glibc-langpack-xh - update to 2.28-251.0.1
glibc-langpack-wo - update to 2.28-251.0.1
glibc-langpack-ru - update to 2.28-251.0.1
glibc-langpack-shn - update to 2.28-251.0.1
glibc-langpack-sgs - update to 2.28-251.0.1
glibc-langpack-se - update to 2.28-251.0.1
glibc-langpack-sd - update to 2.28-251.0.1
glibc-langpack-sc - update to 2.28-251.0.1
glibc-langpack-sat - update to 2.28-251.0.1
glibc-langpack-sah - update to 2.28-251.0.1
glibc-langpack-sa - update to 2.28-251.0.1
glibc-langpack-rw - update to 2.28-251.0.1
glibc-langpack-shs - update to 2.28-251.0.1
glibc-langpack-ro - update to 2.28-251.0.1
glibc-langpack-raj - update to 2.28-251.0.1
glibc-langpack-quz - update to 2.28-251.0.1
glibc-langpack-pt - update to 2.28-251.0.1
glibc-langpack-ps - update to 2.28-251.0.1
glibc-langpack-pl - update to 2.28-251.0.1
glibc-langpack-pap - update to 2.28-251.0.1
glibc-langpack-pa - update to 2.28-251.0.1
glibc-langpack-ss - update to 2.28-251.0.1
glibc-langpack-th - update to 2.28-251.0.1
glibc-langpack-tg - update to 2.28-251.0.1
glibc-langpack-te - update to 2.28-251.0.1
glibc-langpack-tcy - update to 2.28-251.0.1
glibc-langpack-ta - update to 2.28-251.0.1
glibc-langpack-szl - update to 2.28-251.0.1
glibc-langpack-sw - update to 2.28-251.0.1
glibc-langpack-sv - update to 2.28-251.0.1
glibc-langpack-st - update to 2.28-251.0.1
glibc-langpack-os - update to 2.28-251.0.1
glibc-langpack-sr - update to 2.28-251.0.1
glibc-langpack-sq - update to 2.28-251.0.1
glibc-langpack-so - update to 2.28-251.0.1
glibc-langpack-sm - update to 2.28-251.0.1
glibc-langpack-sl - update to 2.28-251.0.1
glibc-langpack-sk - update to 2.28-251.0.1
glibc-langpack-sid - update to 2.28-251.0.1
glibc-langpack-si - update to 2.28-251.0.1
glibc-langpack-an - update to 2.28-251.0.1
glibc-langpack-brx - update to 2.28-251.0.1
glibc-langpack-br - update to 2.28-251.0.1
glibc-langpack-bi - update to 2.28-251.0.1
glibc-langpack-bho - update to 2.28-251.0.1
glibc-langpack-bhb - update to 2.28-251.0.1
glibc-langpack-bg - update to 2.28-251.0.1
glibc-langpack-ber - update to 2.28-251.0.1
glibc-langpack-bem - update to 2.28-251.0.1
glibc-langpack-be - update to 2.28-251.0.1
glibc-langpack-az - update to 2.28-251.0.1
glibc-langpack-ayc - update to 2.28-251.0.1
glibc-langpack-ast - update to 2.28-251.0.1
glibc-langpack-as - update to 2.28-251.0.1
glibc-langpack-ar - update to 2.28-251.0.1
glibc-langpack-anp - update to 2.28-251.0.1
glibc-langpack-bn - update to 2.28-251.0.1
glibc-langpack-am - update to 2.28-251.0.1
glibc-langpack-ak - update to 2.28-251.0.1
glibc-langpack-agr - update to 2.28-251.0.1
glibc-langpack-af - update to 2.28-251.0.1
glibc-langpack-aa - update to 2.28-251.0.1
glibc-gconv-extra - addressed in versions 2.28-251.0.1, 2.38-3
glibc-benchtests - addressed in versions 2.28-251.0.1, 2.38-3
glibc-all-langpacks - addressed in versions 2.28-251.0.1, 2.38-3
compat-libpthread-nonshared - addressed in versions 2.28-251.0.1, 2.38-3
glibc-langpack-fy - update to 2.28-251.0.1
glibc-langpack-el - update to 2.28-251.0.1
glibc-langpack-fur - update to 2.28-251.0.1
glibc-langpack-fr - update to 2.28-251.0.1
glibc-langpack-fo - update to 2.28-251.0.1
glibc-langpack-fil - update to 2.28-251.0.1
glibc-langpack-fi - update to 2.28-251.0.1
glibc-langpack-ff - update to 2.28-251.0.1
glibc-langpack-fa - update to 2.28-251.0.1
glibc-langpack-eu - update to 2.28-251.0.1
glibc-langpack-et - update to 2.28-251.0.1
glibc-langpack-es - update to 2.28-251.0.1
glibc-langpack-eo - update to 2.28-251.0.1
glibc-langpack-en - addressed in versions 2.28-251.0.1, 2.38-3
glibc-langpack-bs - update to 2.28-251.0.1
glibc-langpack-dz - update to 2.28-251.0.1
glibc-langpack-dv - update to 2.28-251.0.1
glibc-langpack-ce - update to 2.28-251.0.1
glibc-langpack-byn - update to 2.28-251.0.1
glibc-langpack-ca - update to 2.28-251.0.1
glibc-langpack-dsb - update to 2.28-251.0.1
glibc-langpack-chr - update to 2.28-251.0.1
glibc-langpack-cmn - update to 2.28-251.0.1
glibc-langpack-crh - update to 2.28-251.0.1
glibc-langpack-cs - update to 2.28-251.0.1
glibc-langpack-csb - update to 2.28-251.0.1
glibc-langpack-cv - update to 2.28-251.0.1
glibc-langpack-cy - update to 2.28-251.0.1
glibc-langpack-da - update to 2.28-251.0.1
glibc-langpack-de - update to 2.28-251.0.1
glibc-langpack-doi - update to 2.28-251.0.1
libc6 (Ubuntu package) - addressed in versions 2.31-0ubuntu9.15, 2.35-0ubuntu3.7, 2.38-1ubuntu6.2, 2.39-0ubuntu8.1
glibc (Debian package) - addressed in versions 2.31-13+deb11u9, 2.36-9+deb12u6
aaa_glibc-solibs - update to 2.33
glibc - update to 2.33
glibc-i18n - update to 2.33
glibc-profile - update to 2.33
glibc-locale-archive - update to 2.34-150
glibc - addressed in versions 2.37-19.fc38, 2.38-18.fc39
sys-libs/glibc - update to 2.38-r13
PowerStoreX OS - update to 3.2.1.5-2424458
PowerStore T - update to 3.6.1.4-2413340
Red Hat OpenShift Dev Spaces - update to 3.15.0
IBM OS Image for Red Hat Linux Systems - update to 4.0.4.0
Red Hat Advanced Cluster Security for Kubernetes - update to 4.4.2
Red Hat OpenShift Container Platform - addressed in versions 4.12.57, 4.12.58, 4.12.59, 4.12.67, 4.13.42, 4.13.52, 4.14.26, 4.14.28, 4.14.39, 4.15.14, 4.15.36, 4.16.16
OpenShift Virtualization - update to 4.14.6
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.0.1
App Connect Enterprise Certified Container - addressed in versions 5.0.19, 12.2.0
watsonx Assistant Cartridge - update to 5.1.1
watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component - update to 5.1.1
phpMyAdmin - addressed in versions 5.2.2-1.el9, 5.2.2-1.el10_0, 5.2.2-1.fc40, 5.2.2-1.fc41
Dell Secure Connect Gateway - update to 5.24.00.14
IBM Storage Scale System - addressed in versions 6.1.9.4, 6.2.1.0
Red Hat Migration Toolkit for Applications - addressed in versions 6.2.3, 7.0.3
Session Smart Router - addressed in versions 6.2.10, 6.3.7
Precision 7920 XL Rack - update to 7.00.00.181
iDRAC9 - addressed in versions 7.00.00.181, 7.20.30.50
Precision 7920 Rack - update to 7.00.00.181
Storage Ceph - update to 7.1
IBM Qradar SIEM - update to 7.5.0 Update Pack 10 IF01
AMQ Broker - update to 7.12.0
Dell EMC VxRail Appliance - update to 8.0.212
OpenShift Container Platform for Windows Containers - addressed in versions 8.1.3, 10.15.3
Storage Virtualize - addressed in versions 8.4.0.15, 8.5.0.13, 8.6.0.5, 8.7.0.0
RSA Authentication Manager - update to 8.7 SP2 Patch 2
IBM Integrated Analytics System - update to 8.8.24.10.SP1
IBM supplied MQ Advanced container images - addressed in versions 9.3.0.17-r2, 9.3.5.1-r2
HPE OneView - update to 10.00
IBM Security Verify Governance - update to 10.0.2.0.4
IBM Workload Scheduler - addressed in versions 10.1.0.5, 10.2.3
IBM DataPower Gateway - addressed in versions 10.5.0.14, 10.6.0.2
IBM Security Guardium - addressed in versions 11.0 p6509, 12.0 p6009
EMC Cloud Tiering Appliance - update to 13.2.0.2.31
Red Hat OpenStack - update to 16.2
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3-IF035, 24.0.0-IF001
Red Hat build of Keycloak - addressed in versions 22.0.11, 24.0.5

• Exploit #11143 - PHP-file-read-to-RCE-CVE-2024-2961- (To use, implement the Remote class, which tells the exploit how to send the payload.) (February 21, 2025)
• Exploit #11118 - CVE-2024-2961_buddyforms_2.7.7 (February 7, 2025)
• Exploit #11113 - cve-2024-2961_buddyforms (CVE-2024-2961 Cnext RCE Exploit with Buddyforms 2.7.7) (February 7, 2025)
• Exploit #11103 - CVE-2024-2961-Remote-File-Read (January 31, 2025)
• Exploit #10625 - CosmicSting: Magento Arbitrary File Read (CVE-2024-34102) + PHP Buffer Overflow in the iconv() function of glibc (CVE-2024-2961) (October 18, 2024)
• Exploit #9960 - CVE-2024-2961_poc (June 7, 2024)
• Exploit #9959 - cve-2024-2961 (June 7, 2024)
• Exploit #9957 - test_iconv (June 7, 2024)
• Exploit #9872 - cnext-exploits (May 31, 2024)
• Exploit #9786 - FIX-CVE-2024-2961 (May 13, 2024)

• https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004

• Remote code execution in GNU C Library
• Ubuntu update for glibc
• Fedora 39 update for glibc
• Fedora 38 update for glibc
• Slackware Linux update for glibc
• Ubuntu update for glibc
• SUSE update for glibc
• SUSE update for glibc
• Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
• SUSE update for glibc-livepatches
• SUSE update for glibc
• Red Hat Enterprise Linux 8 update for glibc
• Red Hat Enterprise Linux 8.6 Extended Update Support update for glibc
• Red Hat Enterprise Linux 8 update for glibc
• Red Hat Enterprise Linux 8 update for glibc
• Red Hat Enterprise Linux 8.8 Extended Update Support update for glibc
• Red Hat Enterprise Linux 9 update for glibc
• Red Hat Enterprise Linux 9 update for glibc
• Red Hat Enterprise Linux 9.0 Extended Update Support update for glibc
• Red Hat Enterprise Linux 8.2 Advanced Update Support update for glibc
• Red Hat Enterprise Linux 7 update for glibc
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Dell Secure Connect Gateway
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.11
• Multiple vulnerabilities in Network Observability plugin for the Openshift Console 1.6
• Multiple vulnerabilities in AMQ Broker 7.12
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 4.4
• Multiple vulnerabilities in OpenShift Virtualization 4.14
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.3
• Multiple vulnerabilities in OpenShift Service Mesh 2.5
• Multiple vulnerabilities in OpenShift Service Mesh 2.4
• Multiple vulnerabilities in Ansible Automation Platform 2.4 packages
• Multiple vulnerabilities in Red Hat OpenStack 16.2 packages
• Multiple vulnerabilities in Red Hat Migration Toolkit for Applications 6.2
• Multiple vulnerabilities in Service Interconnect 1.5
• Multiple vulnerabilities in Dell EMC VxRail Appliance
• Gentoo update for glibc
• Multiple vulnerabilities in Service Interconnect 1.4
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.12
• Debian update for glibc
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Unified Data Repository
• Multiple vulnerabilities in Red Hat OpenShift Dev Spaces
• openEuler 20.03 LTS SP4 update for glibc
• openEuler 22.03 LTS SP1 update for glibc
• openEuler 22.03 LTS SP3 update for glibc
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.10
• Multiple vulnerabilities in Dell SmartFabric OS10
• Multiple vulnerabilities in IBM Cloud Pak for Network Automation
• Amazon Linux AMI update for glibc
• Amazon Linux AMI update for glibc
• Buffer overflow in IBM Storage Ceph
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in App Connect Enterprise Certified Container
• Multiple vulnerabilities in OpenShift Container Platform for Windows Containers 10.15
• Multiple vulnerabilities in Traffix SDC OpenSSL component
• Multiple vulnerabilities in OpenShift Container Platform for Windows Containers 8.1
• Multiple vulnerabilities in IBM Security Guardium
• Multiple vulnerabilities in Juniper Secure Analytics (JSA)
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation
• Multiple vulnerabilities in Red Hat build of Keycloak 24.0
• Multiple vulnerabilities in Red Hat build of Keycloak 22.0
• Buffer overflow in IBM Storage Virtualize
• Multiple vulnerabilities in IBM Business Automation Manager Open Editions
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in IBM Security Verify Governance - Identity Manager
• Multiple vulnerabilities in IBM Storage Scale System
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in IBM Cloud Pak System
• Multiple vulnerabilities in IBM QRadar SIEM
• IBM DataPower Gateway update for GNU C Library
• IBM Integrated Analytics System update for GNU glibc
• Multiple vulnerabilities in Dell PowerStore T
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• phpMyAdmin update for glibc/iconv
• Multiple vulnerabilities in IBM Workload Scheduler component of IBM Workload Automation
• Multiple vulnerabilities in IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component
• Anolis OS update for glibc
• Anolis OS update for glibc
• Anolis OS update for glibc
• Dell SmartFabric Storage Software update for third-party components
• Junos Space update for third-party components
• Multiple vulnerabilities in IBM webMethods Managed File Transfer
• Fedora 41 update for phpMyAdmin
• Fedora EPEL 10.0 update for phpMyAdmin
• Fedora 40 update for phpMyAdmin
• Fedora EPEL 9 update for phpMyAdmin
• RSA Authentication Manager update for third-party components
• Dell RecoverPoint for Virtual Machines update for third-party components
• Multiple vulnerabilities in IBM Voice Gateway
• Multiple vulnerabilities in Dell PowerStore X
• Multiple vulnerabilities in Dell iDRAC9
• Multiple vulnerabilities in Dell Precision Rack
• Multiple vulnerabilities in IBM Guardium Data Security Center
• Multiple vulnerabilities in HPE OneView
• IBM Data Observability by Databand Self-Hosted update for GNU C Library
• Multiple vulnerabilities in IBM Edge Application Manager
• Juniper Session Smart Router update for third-party components
• Multiple vulnerabilities in Red Hat Migration Toolkit for Applications 7.0
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.12
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.10
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.11