CVE-2014-5119: High severity gnu c library (glibc) vulnerability
Off-by-one error in the gconvtranslitfind function in gconvtrans.c in GNU C Library (aka glibc) allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via vectors related to the CHARSET environment variable and gconv transliteration modules.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-5119?
CVE-2014-5119 has a severity rating that indicates it can lead to a denial of service or arbitrary code execution, alerting users of potential significant risks.
How do I fix CVE-2014-5119?
To fix CVE-2014-5119, update to a version of glibc that is greater than 2.20, as this vulnerability has been addressed in subsequent releases.
Which versions of glibc are affected by CVE-2014-5119?
CVE-2014-5119 affects glibc versions prior to 2.20 inclusive.
What systems are impacted by CVE-2014-5119?
CVE-2014-5119 impacts systems running affected versions of the GNU C Library, particularly Debian GNU/Linux 7.0 and earlier.
What types of attacks can exploit CVE-2014-5119?
CVE-2014-5119 can be exploited by context-dependent attackers to potentially cause a denial of service or execute arbitrary code through manipulation of the CHARSET environment variable.