# N/A
## 漏洞概述
`iconv()`函数在GNU C Library版本2.39及更早版本中，当将字符串转换为ISO-2022-CN-EXT字符集时，可能会溢出传入的输出缓冲区，最多溢出4个字节。这可能导致应用程序崩溃或覆盖邻近变量。
## 影响版本
- GNU C Library 2.39及更早版本
## 漏洞细节
`iconv()`函数在进行字符集转换时，如果目标字符集为ISO-2022-CN-EXT，可能会导致输出缓冲区溢出4个字节。这通常发生在多字节字符的转换过程中，当源字符串和目标字符串之间的编码长度不匹配时。
## 影响
该漏洞可能被用于造成应用程序崩溃，或在某些情况下，导致邻近变量被覆盖，进而可能引发安全问题。
| # | POC 描述 | 源链接 | 神龙链接 |
|---|---|---|---|
| 1 | Quick mitigation script | https://github.com/mattaperkins/FIX-CVE-2024-2961 | POC详情 |
| 2 | CVE-2024–2961 Security Issue Mitigation Script | https://github.com/rvizx/CVE-2024-2961 | POC详情 |
| 3 | Exploits for CNEXT (CVE-2024-2961), a buffer overflow in the glibc's iconv() | https://github.com/ambionics/cnext-exploits | POC详情 |
| 4 | Bash script to patch for CVE-2024-2961 | https://github.com/absolutedesignltd/iconvfix | POC详情 |
| 5 | This repository contains a C program to test for CVE-2024-2961, a buffer overflow vulnerability in the iconv() function of glibc. | https://github.com/exfil0/test_iconv | POC详情 |
| 6 | None | https://github.com/tnishiox/cve-2024-2961 | POC详情 |
| 7 | None | https://github.com/kjdfklha/CVE-2024-2961_poc | POC详情 |
| 8 | This script demonstrates a proof-of-concept (PoC) for exploiting a file read vulnerability in the iconv library, as detailed in Ambionics Security's blog https://www.ambionics.io/blog/iconv-cve-2024-2961-p1. | https://github.com/kyotozx/CVE-2024-2961-Remote-File-Read | POC详情 |
| 9 | Uses CVE-2024-2961 to perform an arbitrary file read | https://github.com/4wayhandshake/CVE-2024-2961 | POC详情 |
| 10 | CVE-2024-2961 Cnext RCE Exploit with Buddyforms 2.7.7 | https://github.com/suce0155/CVE-2024-2961_buddyforms_2.7.7 | POC详情 |
| 11 | To use, implement the Remote class, which tells the exploit how to send the payload. | https://github.com/regantemudo/PHP-file-read-to-RCE-CVE-2024-2961- | POC详情 |
| 12 | PHP Local File Read vulnerability leading to Remote Code Execution | https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2024/CVE-2024-2961.yaml | POC详情 |
| 13 | None | https://github.com/Threekiii/Awesome-POC/blob/master/%E5%BC%80%E5%8F%91%E8%AF%AD%E8%A8%80%E6%BC%8F%E6%B4%9E/PHP%20%E5%88%A9%E7%94%A8%20GNU%20C%20Iconv%20%E5%B0%86%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%8F%90%E5%8D%87%E8%87%B3%20RCE%20CVE-2024-2961.md | POC详情 |
| 14 | https://github.com/vulhub/vulhub/blob/master/php/CVE-2024-2961/README.md | POC详情 | |
| 15 | Exploits for CNEXT (CVE-2024-2961), a buffer overflow in the glibc's iconv() | https://github.com/scriptSails/glibcs | POC详情 |
暂无评论