A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an application crash and denial of service.

The version of coreutils installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0684 advisory.

  - A flaw was found in the GNU coreutils split program. A heap overflow with user-controlled data of     multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an     application crash and denial of service. (CVE-2024-0684)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A flaw was found in the GNU coreutils split program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an application crash and denial of service.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0969 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-0684:
    A flaw was found in the GNU coreutils split program. A heap overflow with user-controlled data of     multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an     application crash and denial of service.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of
    multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an
    application crash and denial of service. (CVE-2024-0684)

The remote host is affected by the vulnerability described in GLSA-202407-16 (GNU Coreutils: Buffer Overflow Vulnerability)

    A vulnerability has been discovered in the Coreutils split program that can lead to a heap buffer     overflow and possibly arbitrary code execution.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of coreutils installed on the remote host is prior to 9.5. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-088-03 advisory.

  - A flaw was found in the GNU coreutils split program. A heap overflow with user-controlled data of     multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an     application crash and denial of service. (CVE-2024-0684)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-6b85e8848f advisory.

    Security fix for CVE-2024-0684

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
296187	Azure Linux 3.0 Security Update: coreutils (CVE-2024-0684)	Nessus	Azure Linux Local Security Checks	medium
503852	Siemens SIMATIC Devices Heap-based Buffer Overflow (CVE-2024-0684)	Tenable OT Security	Tenable.ot	medium
240013	TencentOS Server 4: coreutils (TSSA-2024:0969)	Nessus	Tencent Local Security Checks	medium
423790	Alpine: multiple coreutils packages: security update to 9.4-r2	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
423790	Alpine: multiple coreutils packages: security update to 9.4-r2	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
201912	GLSA-202407-16 : GNU Coreutils: Buffer Overflow Vulnerability	Nessus	Gentoo Local Security Checks	medium
192678	Slackware Linux 15.0 / current coreutils Vulnerability (SSA:2024-088-03)	Nessus	Slackware Local Security Checks	medium
408256	Alpine: coreutils: security update to 9.4-r2	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
408256	Alpine: coreutils: security update to 9.4-r2	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
408255	Alpine: coreutils: security update to 9.3-r2	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
408255	Alpine: coreutils: security update to 9.3-r2	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
189313	Fedora 39 : coreutils (2024-6b85e8848f)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2024-0684

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium