CVE-2014-5119

Severity

75%

Complexity

99%

Confidentiality

106%

Off-by-one error in the __gconv_translit_find function in gconv_trans.c in GNU C Library (aka glibc) allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via vectors related to the CHARSET environment variable and gconv transliteration modules.

Off-by-one error in the __gconv_translit_find function in gconv_trans.c in GNU C Library (aka glibc) allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via vectors related to the CHARSET environment variable and gconv transliteration modules.

CVSS 2.0 Base Score 7.5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:P/I:P/A:P).

Overview

First reported 10 years ago

2014-08-29 16:55:00

Last updated 4 years ago

2020-03-31 15:32:00

Affected Software

GNU glibc

Debian Linux 7.0

7.0

References

http://googleprojectzero.blogspot.com/2014/08/the-poisoned-nul-byte-2014-edition.html

Third Party Advisory

http://linux.oracle.com/errata/ELSA-2015-0092.html

Third Party Advisory

SUSE-SU-2014:1125

Mailing List, Third Party Advisory

RHSA-2014:1118

Third Party Advisory

20140826 CVE-2014-5119 glibc __gconv_translit_find() exploit

Mailing List, Third Party Advisory

60345

Third Party Advisory

60358

Third Party Advisory

60441

Third Party Advisory

61074

Third Party Advisory

61093

Third Party Advisory

20140910 Cisco Unified Communications Manager glibc Arbitrary Code Execution Vulnerability

Third Party Advisory

DSA-3012

Third Party Advisory

MDVSA-2014:175

Third Party Advisory

[oss-security] 20170713 glibc locale issues

Mailing List, Third Party Advisory

[oss-security] 20170713 Re: [CVE Request] glibc iconv_open buffer overflow (was: Re: Re: glibc locale issues)

Mailing List, Third Party Advisory

68983

Third Party Advisory, VDB Entry

69738

Third Party Advisory, VDB Entry

http://www-01.ibm.com/support/docview.wss?uid=swg21685604

Third Party Advisory

https://code.google.com/p/google-security-research/issues/detail?id=96

Third Party Advisory

RHSA-2014:1110

Third Party Advisory

GLSA-201602-02

Third Party Advisory

https://sourceware.org/bugzilla/show_bug.cgi?id=17187

Issue Tracking, Third Party Advisory

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.