• glibc-2.28-251.el8 ()
  • 2.28-251.el8_10.16
  • 2025-04-21 14:00:10
  • CVE CVE-2024-2961, CVSSv2 Score: 8.8
  • Description:

    The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.

  • CVE CVE-2025-0395, CVSSv2 Score: 5.5
  • Description:

    A flaw was found in the GNU C Library (glibc). A buffer overflow condition via the assert() function may be triggered due to glibc not allocating enough space for the assertion failure message string and size information. In certain conditions, a local attacker can exploit this, potentially leading to an application crash or other undefined behavior.

  • CVE CVE-2025-0395, CVSSv2 Score: 5.5
  • Description:

    A flaw was found in the GNU C Library (glibc). A buffer overflow condition via the assert() function may be triggered due to glibc not allocating enough space for the assertion failure message string and size information. In certain conditions, a local attacker can exploit this, potentially leading to an application crash or other undefined behavior.