Vulnerabilities > CVE-2024-0684 - Out-of-bounds Write vulnerability in GNU Coreutils 9.2/9.3/9.4

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
gnu
CWE-787

Summary

A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an application crash and denial of service.

Vulnerable Configurations

Part Description Count
Application
Gnu
3

Common Weakness Enumeration (CWE)