CVE-2024-0684
A flaw was found in the GNU coreutils "split" program.
Published Feb 6, 2024 · updated Oct 15, 2026 · gnu coreutils
A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an application crash and denial of service.
Timeline
Detection, updates, and resolution for this record.
Feb 6, 2024 · NIST NVD
Detected
A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an application crash and denial of service.
Oct 15, 2026 · NIST NVD
Updated
A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an application crash and denial of service.
Affected
- cpe gnu/coreutils9.2
- cpe gnu/coreutils9.3
- cpe gnu/coreutils9.4
Sources
- CVE.orgCVE-2024-0684
Official CVE identifier
cve.org - NIST NVDCVE-2024-0684
A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an application crash and denial of service.
nvd.nist.gov