A flaw was found in the GNU coreutils "split" program.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Feb 6, 2024 · NIST NVD

   Detected

   A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an application crash and denial of service.

2. Oct 15, 2026 · NIST NVD

   Updated

   A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an application crash and denial of service.

Affected

• cpe gnu/coreutils9.2
• cpe gnu/coreutils9.3
• cpe gnu/coreutils9.4

Sources

• CVE.orgVulnerability recordCVE-2024-0684

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2024-0684

  30-day exploitation probability 0.5%

  first.org
• NIST NVDVulnerability recordCVE-2024-0684

  A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an application crash and denial of service.

  nvd.nist.gov

References

• Third Party Advisory · access.redhat.com
• Issue Tracking · bugzilla.redhat.com
• Reference · lists.fedoraproject.org
• Reference · security.netapp.com
• Mailing List · openwall.com