VULNERABILITY INTELLIGENCE

CVE-2024-0684

CVSS score5.5 MEDIUM
EPSS probability0.49%
CISA KEVNot currently listed
Published2024-02-06
Last modified2026-10-15
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an application crash and denial of service.

Weakness classification

  • CWE-122: Heap-based Buffer Overflow
  • CWE-787: Out-of-bounds Write

Primary references