CVE-2024-0684 — Vulnetix

CVE-2024-0684 PUBLISHED CVSS 5.5 MEDIUM

A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an application crash and denial of service.

EPSS 0.09% · 25.3th percentile

Risk Scores

CVSS 3.1

5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Score

0.09%

25.3th percentile

Affected Products

Vendor	Product	Versions
gnu	coreutils	9.3, 9.4, 9.2
		v9.2, v9.3, v9.5

Exploit Intelligence

Writeup of a heap overflow vulnerability in the GNU coreutils split program. CVE-2024-0684 (github-poc)
Writeup of a heap overflow vulnerability in the GNU coreutils split program. CVE-2024-0684 (github-poc)
Writeup of a heap overflow vulnerability in the GNU coreutils split program. CVE-2024-0684 (github-poc)
Writeup of a heap overflow vulnerability in the GNU coreutils split program. CVE-2024-0684 (github-poc)
Writeup of a heap overflow vulnerability in the GNU coreutils split program. CVE-2024-0684 (github-poc)
Writeup of a heap overflow vulnerability in the GNU coreutils split program. CVE-2024-0684 (github-poc)
CIRCL seen: CVE-2024-0684 (circl-sighting)
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2KAURFJIEYY2BWCPN4AZDYCVMFD5J4GB/ (circl)
https://security.netapp.com/advisory/ntap-20240808-0001/ (circl)
https://www.openwall.com/lists/oss-security/2024/01/18/2 (circl)

…and 27 more exploits

Timeline

Feb 6, 2024 CVE Published
Feb 8, 2024 EPSS Score
Mar 6, 2024 EPSS Score
Apr 2, 2024 EPSS Score
May 27, 2024 EPSS Score
Jun 23, 2024 EPSS Score
Jul 20, 2024 EPSS Score
Aug 20, 2024 EPSS Score
Sep 16, 2024 EPSS Score
Oct 4, 2024 Coalition ESS Score
Nov 9, 2024 EPSS Score
Dec 8, 2024 EPSS Score

References

Open in Interactive Console →