CVE-2024-2961 PoC — GNU C Library 安全漏洞

Source

https://github.com/rvizx/CVE-2024-2961

Associated Vulnerability

Title: GNU C Library 安全漏洞 (CVE-2024-2961)
Description:The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.

Description

CVE-2024–2961 Security Issue Mitigation Script

Readme

# CVE-2024-2961
CVE-2024–2961 Security Issue Mitigation Script

![poc](https://github.com/rvizx/CVE-2024-2961/assets/84989569/e6c34df1-9e9e-4bc9-8a15-20b9217b6cee)


## Description

This repository contains a Bash script to check and mitigate the buffer overflow vulnerability identified in GNU libc (glibc) versions 2.39 and older, known as CVE-2024-2961. This vulnerability affects PHP when the `iconv` function is used to translate request encodings to/from certain Chinese Extended encodings (ISO-2022-CN-EXT). If exploited, it can lead to potential wide-ranging impacts.


## Usage

### Prerequisites

- Ensure you have the necessary permissions to modify system configuration files.
- The script requires basic utilities such as `ldd`, `iconv`, `grep`, and `find` to be available on your system.

### Running the Script

```bash
git clone https://github.com/yourusername/CVE-2024-2961
cd CVE-2024-2961
chmod +x fix.sh
sudo ./fix.sh
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →