7.3

CVE-2024-2961: debian debian_linux Out-of-bounds Write

CVSS: 7.3v3.1HighUndergoing analysis
AliasesMGASA-2024-0147SUSE-SU-2024:1375-1SUSE-SU-2024:1728-1
Published 17-04-2024Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2024-2961 is a high (CVSS 7.3) Out-of-bounds Write vulnerability in debian debian_linux. EPSS estimates a 88.33% chance of exploitation in the next 30 days, higher than 99.7% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
57/100
0100
High · default modelHow is this calculated?
CVSS score
7.3/10
010
High · v3.1 (CVE.org)
EPSS score
88.33%
0%100%
Critical · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1metasploit

Advisory lineage

Upstream 0 · Downstream 15 · Related 8
MGASA-2025-0023OPENSUSE-SU-2025:0081-1OPENSUSE-SU-2025:14688-1RHSA-2024:2799RHSA-2024:3309RHSA-2024:3312

Timeline

  1. 17-04-2024
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.

CVSS metrics

7 scores · 7 sources · 1 version

EPSS trend

Probability

88.33%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 88.33% on 18-09-2026

18-09-202618-10-2026
EPSS score
88.33%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • MetasploitMetasploitremoteVerified

    CosmicSting: Magento Arbitrary File Read (CVE-2024-34102) + PHP Buffer Overflow in the iconv() function of glibc (CVE-2024-2961)

    exploit/linux/http/magento_xxe_to_glibc_buf_overflow

    Maturity: weaponized

Weaknesses

CWE · root cause

Affected systems

Redhat177 products
  • compat-libpthread-nonshared< 0:2.28-236.el8_9.13 | < 0:2.28-251.el8_10.1
  • glibc< 0:2.28-236.el8_9.13 | < 0:2.28-251.el8_10.1
  • glibc-all-langpacks< 0:2.28-236.el8_9.13 | < 0:2.28-251.el8_10.1
  • glibc-all-langpacks-debuginfo< 0:2.28-236.el8_9.13 | < 0:2.28-251.el8_10.1
  • glibc-benchtests< 0:2.28-236.el8_9.13 | < 0:2.28-251.el8_10.1
Netapp11 products
Opensuse4 products
  • glibc&distro=openSUSE Leap 15.5< 2.31-150300.74.1
  • glibc&distro=openSUSE Leap Micro 5.3< 2.31-150300.74.1
  • glibc&distro=openSUSE Leap Micro 5.4< 2.31-150300.74.1
  • glibc&distro=openSUSE Tumbleweed< 2.39-5.1
Debian2 products
  • glibc< 2.37-18 | < 2.31-13+deb11u9 | < 2.36-9+deb12u6 | < 2.28-10+deb10u3
  • debian_linuxEOL10.0
Ubuntu2 products
  • eglibc< 2.19-0ubuntu6.15+esm3
  • glibc< 2.23-0ubuntu11.3+esm6 | < 2.27-3ubuntu1.6+esm2 | < 2.31-0ubuntu9.15 | < 2.35-0ubuntu3.7 | < 2.39-0ubuntu8.1
Chainguard1 product
  • glibc< 2.39-r2
Gnu1 product
Mageia1 product
  • glibc< 2.36-53.mga9
Wolfi1 product
  • glibc< 2.39-r2

9 vendors · 200 products · Showing 200 of 269. Use Open JSON for the complete list.

References

44 links
Show all 44 references