A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an application crash and denial of service.

A flaw was found in the GNU coreutils split program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an application crash and denial of service.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0969 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-0684:
    A flaw was found in the GNU coreutils split program. A heap overflow with user-controlled data of     multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an     application crash and denial of service.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202407-16 (GNU Coreutils: Buffer Overflow Vulnerability)

    A vulnerability has been discovered in the Coreutils split program that can lead to a heap buffer     overflow and possibly arbitrary code execution.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of coreutils installed on the remote host is prior to 9.5. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-088-03 advisory.

  - A flaw was found in the GNU coreutils split program. A heap overflow with user-controlled data of     multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an     application crash and denial of service. (CVE-2024-0684)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-6b85e8848f advisory.

    Security fix for CVE-2024-0684

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
503852	Siemens SIMATIC Devices Heap-based Buffer Overflow (CVE-2024-0684)	Tenable OT Security	Tenable.ot	medium
240013	TencentOS Server 4: coreutils (TSSA-2024:0969)	Nessus	Tencent Local Security Checks	medium
201912	GLSA-202407-16 : GNU Coreutils: Buffer Overflow Vulnerability	Nessus	Gentoo Local Security Checks	medium
192678	Slackware Linux 15.0 / current coreutils Vulnerability (SSA:2024-088-03)	Nessus	Slackware Local Security Checks	medium
189313	Fedora 39 : coreutils (2024-6b85e8848f)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2024-0684

medium

Tenable Plugins

medium

medium

medium

medium

medium