UBUNTU-CVE-2014-5119

Dashboard / Vulnerabilities / UBUNTU-CVE-2014-5119

UBUNTU-CVE-2014-5119

Summary:

Details: Off-by-one error in the __gconv_translit_find function in gconv_trans.c in GNU C Library (aka glibc) allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via vectors related to the CHARSET environment variable and gconv transliteration modules.

References: https://ubuntu.com/security/CVE-2014-5119, http://seclists.org/oss-sec/2014/q3/145, http://www.openwall.com/lists/oss-security/2014/07/14/2, http://www.openwall.com/lists/oss-security/2014/08/13/5, http://googleprojectzero.blogspot.com/2014/08/the-poisoned-nul-byte-2014-edition.html, http://www.openwall.com/lists/oss-security/2014/08/26/2, https://ubuntu.com/security/notices/USN-2328-1, https://www.cve.org/CVERecord?id=CVE-2014-5119