Vulnerability in Glibc exploited via PHP scripts
A vulnerability (CVE-2024-2961) has been discovered in the standard C library Glibc, leading to a buffer overflow when converting specially formatted strings in ISO-2022-CN-EXT encoding using the iconv() function. The researcher who uncovered the issue plans to present at the OffensiveCon conference on May 10, where the announcement mentions the possibility of exploiting the vulnerability through PHP applications. It is stated that the issue affects the entire PHP ecosystem and some applications. […]
