Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
amazonAmazonALAS-2014-399
HistorySep 03, 2014 - 2:44 p.m.

Important: glibc

2014-09-0314:44:00
alas.aws.amazon.com
20

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

84.7%

JSON

Issue Overview:

An off-by-one heap-based buffer overflow flaw was found in glibc’s internal __gconv_translit_find() function. An attacker able to make an application call the iconv_open() function with a specially crafted argument could possibly use this flaw to execute arbitrary code with the privileges of that application.

Affected Packages:

glibc

Issue Correction:
Run yum update glibc to update your system.

New Packages:

i686:  
    glibc-devel-2.17-55.85.amzn1.i686  
    glibc-2.17-55.85.amzn1.i686  
    glibc-utils-2.17-55.85.amzn1.i686  
    nscd-2.17-55.85.amzn1.i686  
    glibc-headers-2.17-55.85.amzn1.i686  
    glibc-debuginfo-common-2.17-55.85.amzn1.i686  
    glibc-static-2.17-55.85.amzn1.i686  
    glibc-common-2.17-55.85.amzn1.i686  
    glibc-debuginfo-2.17-55.85.amzn1.i686  
  
src:  
    glibc-2.17-55.85.amzn1.src  
  
x86_64:  
    glibc-debuginfo-2.17-55.85.amzn1.x86_64  
    glibc-common-2.17-55.85.amzn1.x86_64  
    glibc-utils-2.17-55.85.amzn1.x86_64  
    glibc-2.17-55.85.amzn1.x86_64  
    glibc-static-2.17-55.85.amzn1.x86_64  
    glibc-debuginfo-common-2.17-55.85.amzn1.x86_64  
    glibc-headers-2.17-55.85.amzn1.x86_64  
    nscd-2.17-55.85.amzn1.x86_64  
    glibc-devel-2.17-55.85.amzn1.x86_64

Additional References

Red Hat: CVE-2014-5119

Mitre: CVE-2014-5119

OSVersionArchitecturePackageVersionFilename
Amazon Linux1i686glibc-devel< 2.17-55.85.amzn1glibc-devel-2.17-55.85.amzn1.i686.rpm
Amazon Linux1i686glibc< 2.17-55.85.amzn1glibc-2.17-55.85.amzn1.i686.rpm
Amazon Linux1i686glibc-utils< 2.17-55.85.amzn1glibc-utils-2.17-55.85.amzn1.i686.rpm
Amazon Linux1i686nscd< 2.17-55.85.amzn1nscd-2.17-55.85.amzn1.i686.rpm
Amazon Linux1i686glibc-headers< 2.17-55.85.amzn1glibc-headers-2.17-55.85.amzn1.i686.rpm
Amazon Linux1i686glibc-debuginfo-common< 2.17-55.85.amzn1glibc-debuginfo-common-2.17-55.85.amzn1.i686.rpm
Amazon Linux1i686glibc-static< 2.17-55.85.amzn1glibc-static-2.17-55.85.amzn1.i686.rpm
Amazon Linux1i686glibc-common< 2.17-55.85.amzn1glibc-common-2.17-55.85.amzn1.i686.rpm
Amazon Linux1i686glibc-debuginfo< 2.17-55.85.amzn1glibc-debuginfo-2.17-55.85.amzn1.i686.rpm
Amazon Linux1x86_64glibc-debuginfo< 2.17-55.85.amzn1glibc-debuginfo-2.17-55.85.amzn1.x86_64.rpm
Rows per page:
1-10 of 181

Related

nessus 25
ibm 12
openvas 29
zdt 1
prion 1
ubuntucve 1
cve 1
redhat 2
exploitpack 1
seebug 1
cloudfoundry 1
debiancve 1
veracode 1
osv 2
debian 2
suse 6
exploitdb 1
centos 1
fedora 3
mageia 1
ubuntu 1
securityvulns 2
oraclelinux 5
f5 2
slackware 1
gentoo 1
nessus
nessus
SuSE 11.3 Security Update : glibc (SAT Patch Number 9669)
2014-09-13 00:00:00
Amazon Linux AMI : glibc (ALAS-2014-399)
2014-10-12 00:00:00
Debian DSA-3012-1 : eglibc - security update
2014-08-28 00:00:00
ibm
ibm
Security Bulletin: Proof of Concept exploit code, which uses a flaw in glibc that can allow a local unprivileged user to gain root on Linux machine in IBM QRadar Incident Forensics (CVE-2014-5119)
2018-06-16 21:21:22
Security Bulletin: IBM Software Delivery and Lifecycle Patterns for the glibc vulnerabilities (CVE-2014-5119)
2018-06-17 04:57:32
Security Bulletin: IBM Workload Deployer - Proof of Concept exploit code, which uses a flaw in glibc that can allow a local unprivileged user to gain root on Linux machine
2018-06-15 07:01:46
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2014:1125-1)
2021-06-09 00:00:00
Debian Security Advisory DSA 3012-1 (eglibc - security update)
2014-08-27 00:00:00
Debian: Security Advisory (DSA-3012-1)
2014-08-26 00:00:00
zdt
zdt
glibc Off-by-One NUL Byte gconv_translit_find Exploit
2014-08-27 00:00:00
prion
prion
Code injection
2014-08-29 16:55:00
ubuntucve
ubuntucve
CVE-2014-5119
2014-08-26 00:00:00
cve
cve
CVE-2014-5119
2014-08-29 16:55:00
redhat
redhat
(RHSA-2014:1118) Important: glibc security update
2014-09-02 00:00:00
(RHSA-2014:1110) Important: glibc security update
2014-08-29 00:00:00
exploitpack
exploitpack
glibc - NUL Byte gconv_translit_find Off-by-One
2014-08-27 00:00:00
seebug
seebug
glibc Off-by-One NUL Byte gconv_translit_find Exploit
2014-09-04 00:00:00
cloudfoundry
cloudfoundry
CVE-2014-5119 glib_gconv_translit_find() exploit | Cloud Foundry
2014-09-19 00:00:00
debiancve
debiancve
CVE-2014-5119
2014-08-29 16:55:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:59:59
osv
osv
eglibc - security update
2014-08-27 00:00:00
eglibc - security update
2014-09-02 00:00:00
debian
debian
[SECURITY] [DSA 3012-1] eglibc security update
2014-08-27 05:51:23
[DLA 43-1] eglibc security update
2014-09-02 18:03:40
suse
suse
Security update for glibc (important)
2014-09-13 03:04:16
glibc (important)
2014-09-11 09:04:39
Security update for glibc (important)
2014-09-12 02:04:23
exploitdb
exploitdb
glibc - NUL Byte gconv_translit_find Off-by-One
2014-08-27 00:00:00
centos
centos
glibc, nscd security update
2014-08-29 20:28:37
fedora
fedora
[SECURITY] Fedora 20 Update: glibc-2.18-14.fc20
2014-08-28 15:31:23
[SECURITY] Fedora 20 Update: glibc-2.18-19.fc20
2015-03-04 10:25:31
[SECURITY] Fedora 19 Update: glibc-2.17-21.fc19
2014-10-19 13:24:18
mageia
mageia
Updated glibc packages fix multiple security vulnerabilities
2014-09-15 14:36:30
ubuntu
ubuntu
GNU C Library vulnerability
2014-08-29 00:00:00
securityvulns
securityvulns
[USN-2328-1] GNU C Library vulnerability
2014-09-01 00:00:00
GNU glibc buffer overflow
2014-09-01 00:00:00
oraclelinux
oraclelinux
glibc security update
2014-08-29 00:00:00
glibc security and bug fix update
2014-12-18 00:00:00
glibc security, bug fix, and enhancement update
2014-10-15 00:00:00
f5
f5
SOL15640 - GNU C Library (glibc) vulnerabilities CVE-2014-0475, CVE-2014-5119, CVE-2013-4458
2014-10-02 00:00:00
K15640 : GNU C Library (glibc) vulnerabilities CVE-2014-0475, CVE-2014-5119, CVE-2013-4458
2014-10-02 00:00:00
slackware
slackware
[slackware-security] glibc
2014-10-24 05:36:04
gentoo
gentoo
GNU C Library: Multiple vulnerabilities
2016-02-17 00:00:00

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

84.7%

JSON
Related for ALAS-2014-399
nessus25ibm12openvas29zdt1prion1ubuntucve1cve1redhat2exploitpack1seebug1cloudfoundry1debiancve1veracode1osv2debian2suse6exploitdb1centos1fedora3mageia1ubuntu1securityvulns2oraclelinux5f52slackware1gentoo1