CVE-2024-0684
Coreutils: heap overflow in split --line-bytes with very long lines
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Coreutils: heap overflow in split --line-bytes with very long lines
| Assigner | fedora |
| Reserved | 2024-01-18 |
| Published | 2024-02-06 |
| Updated | 2024-08-08 |
A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an application crash and denial of service.
| CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| 2024-01-18: | Reported to Red Hat. |
| 2024-01-18: | Made public. |
https://access.redhat.com/security/cve/CVE-2024-0684
https://bugzilla.redhat.com/show_bug.cgi?id=2258948 (RHBZ#2258948)
https://www.openwall.com/lists/oss-security/2024/01/18/2
