Lucene search
GoogleOSV:DSA-3012-1HistoryAug 27, 2014 - 12:00 a.m.
eglibc - security update
2014-08-2700:00:00
Google
osv.dev
10
0.012 Low
EPSS
Percentile
85.0%
Tavis Ormandy discovered a heap-based buffer overflow in the
transliteration module loading code in eglibc, Debian’s version of the
GNU C Library. As a result, an attacker who can supply a crafted
destination character set argument to iconv-related character
conversation functions could achieve arbitrary code execution.
This update removes support of loadable gconv transliteration modules.
Besides the security vulnerability, the module loading code had
functionality defects which prevented it from working for the intended
purpose.
For the stable distribution (wheezy), this problem has been fixed in
version 2.13-38+deb7u4.
We recommend that you upgrade your eglibc packages.
| CPE | Name | Operator | Version |
|---|---|---|---|
| eglibc | eq | 2.13-38 | |
| eglibc | eq | 2.13-38+deb7u3 | |
| eglibc | eq | 2.13-38+deb7u1 | |
| eglibc | eq | 2.13-38+deb7u2 |
References
Related
openvas
openvas
SUSE: Security Advisory for glibc (SUSE-SU-2014:1125-1)
2015-10-13 00:00:00
Debian Security Advisory DSA 3012-1 (eglibc - security update)
2014-08-27 00:00:00
Debian: Security Advisory (DSA-3012-1)
2014-08-26 00:00:00
ibm
ibm
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:59:59
nvd
nvd
CVE-2014-5119
2014-08-29 16:55:11
cvelist
cvelist
CVE-2014-5119
2014-08-29 17:00:00
nessus
nessus
RHEL 5 / 6 : glibc (RHSA-2014:1118)
2014-11-08 00:00:00
Debian DSA-3012-1 : eglibc - security update
2014-08-28 00:00:00
SuSE 11.3 Security Update : glibc (SAT Patch Number 9669)
2014-09-13 00:00:00
ubuntucve
ubuntucve
CVE-2014-5119
2014-08-26 00:00:00
cve
cve
CVE-2014-5119
2014-08-29 17:00:00
amazon
amazon
Important: glibc
2014-09-03 14:44:00
zdt
zdt
glibc Off-by-One NUL Byte gconv_translit_find Exploit
2014-08-27 00:00:00
prion
prion
Code injection
2014-08-29 16:55:00
seebug
seebug
glibc Off-by-One NUL Byte gconv_translit_find Exploit
2014-09-04 00:00:00
exploitpack
exploitpack
glibc - NUL Byte gconv_translit_find Off-by-One
2014-08-27 00:00:00
cloudfoundry
cloudfoundry
CVE-2014-5119 glib_gconv_translit_find() exploit | Cloud Foundry
2014-09-19 00:00:00
redhat
redhat
(RHSA-2014:1118) Important: glibc security update
2014-09-02 00:00:00
(RHSA-2014:1110) Important: glibc security update
2014-08-29 00:00:00
debiancve
debiancve
CVE-2014-5119
2014-08-29 17:00:00
suse
suse
Security update for glibc (important)
2014-09-13 03:04:16
glibc (important)
2014-09-11 09:04:39
Security update for glibc (important)
2014-09-12 02:04:23
debian
debian
[SECURITY] [DSA 3012-1] eglibc security update
2014-08-27 05:51:23
[DLA 43-1] eglibc security update
2014-09-02 18:03:40
exploitdb
exploitdb
glibc - NUL Byte gconv_translit_find Off-by-One
2014-08-27 00:00:00
oraclelinux
oraclelinux
glibc security update
2014-08-29 00:00:00
glibc security and bug fix update
2014-12-18 00:00:00
glibc security update
2015-01-27 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: glibc-2.18-14.fc20
2014-08-28 15:31:23
[SECURITY] Fedora 20 Update: glibc-2.18-19.fc20
2015-03-04 10:25:31
[SECURITY] Fedora 19 Update: glibc-2.17-21.fc19
2014-10-19 13:24:18
osv
osv
eglibc - security update
2014-09-02 00:00:00
mageia
mageia
Updated glibc packages fix multiple security vulnerabilities
2014-09-15 14:36:30
ubuntu
ubuntu
GNU C Library vulnerability
2014-08-29 00:00:00
securityvulns
securityvulns
[USN-2328-1] GNU C Library vulnerability
2014-09-01 00:00:00
GNU glibc buffer overflow
2014-09-01 00:00:00
centos
centos
glibc, nscd security update
2014-08-29 20:28:37
f5
f5
slackware
slackware
[slackware-security] glibc
2014-10-24 05:36:04
gentoo
gentoo
GNU C Library: Multiple vulnerabilities
2016-02-17 00:00:00