https://seclists.org/oss-sec/2024/q2/259: The GNU C Library security advisories update for 2024-04-17: GLIBC-SA-2024-0004/CVE-2024-2961: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence
Published May 27, 2024
·Updated
Affected Software
1 affected component
The PHP Group PHP
Frequently Asked Questions
1
What is the severity of GLIBC-SA-2024-0004/CVE-2024-2961?
The severity of GLIBC-SA-2024-0004/CVE-2024-2961 is categorized as high due to the potential for out-of-bounds writes.
2
How do I fix GLIBC-SA-2024-0004/CVE-2024-2961?
To fix GLIBC-SA-2024-0004/CVE-2024-2961, update the GNU C Library to the latest version that addresses the vulnerability.
3
What kind of impact does GLIBC-SA-2024-0004/CVE-2024-2961 have?
GLIBC-SA-2024-0004/CVE-2024-2961 can lead to buffer overflow vulnerabilities, potentially allowing arbitrary code execution.
4
Which applications are affected by GLIBC-SA-2024-0004/CVE-2024-2961?
Applications that use the GNU C Library and manipulate ISO-2022-CN-EXT encodings could be affected by GLIBC-SA-2024-0004/CVE-2024-2961.
5
Is there a workaround for GLIBC-SA-2024-0004/CVE-2024-2961?
As a workaround for GLIBC-SA-2024-0004/CVE-2024-2961, avoid processing untrusted input through ISO-2022-CN-EXT until the library is updated.