CVE-2014-5119

🗓️ 29 Aug 2014 17:00:00Reported by redhatType

Off-by-one error in __gconv_translit_find function in gconv_trans.c in GNU C Library (aka glibc) allows attackers to cause denial of service or execute arbitrary code via vectors related to CHARSET environment variable and gconv transliteration modules

Reporter	Title	Published	Views	Family All 129
IBM Security Bulletins	Security Bulletin: IBM Software Delivery and Lifecycle Patterns for the glibc vulnerabilities (CVE-2014-5119)	17 Jun 201804:57	–	ibm
IBM Security Bulletins	Security Bulletin: Proof of Concept exploit code, which uses a flaw in glibc that can allow a local unprivileged user to gain root on Linux machine in IBM QRadar Incident Forensics (CVE-2014-5119)	16 Jun 201821:21	–	ibm
IBM Security Bulletins	Security Bulletin: Two (2) Vulnerabilities in glibc affect IBM FlashSystem (and TMS RAMSAN) 710, 720, 810, and 820 systems (CVE-2014-5119 and CVE-2014-0475)	28 Feb 202301:12	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in glibc affect the IBM Flex System Manager (FSM): (CVE-2013-4332, CVE-2014-0475, CVE-2014-5119)	31 Jan 201901:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Netezza Host Management (CVE-2014-5119)	18 Oct 201903:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Bash and GNU C Library affect WebSphere Transformation Extender (WTX) with Launcher Hypervisor Edition (CVE-2014-6271, CVE-2014-6277, CVE-2014-6278, CVE-2014-7169, CVE-2014-5119, CVE-2014-7186, CVE-2014-7187)	16 Jun 201819:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in GNU C Library affects IBM SmartCloud Provisioning for Software Virtual Appliance (CVE-2014-5119, CVE-2014-0475)	17 Jun 201822:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Workload Deployer - Proof of Concept exploit code, which uses a flaw in glibc that can allow a local unprivileged user to gain root on Linux machine	15 Jun 201807:01	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in glibc affect ”WebSphere Message Broker v8 HVE” and “IBM Integration Bus V9 HVE” (CVE-2014-5119)	15 Jun 201807:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is affected by a GNU C Library (glibc) vulnerability (CVE-2014-5119)	23 Feb 202217:02	–	ibm

NVD

Node

gnu glibcRange<2.20

Node

debian debian_linuxMatch7.0

Source	Link
security	www.security.gentoo.org/glsa/201602-02
securityfocus	www.securityfocus.com/bid/69738
securityfocus	www.securityfocus.com/bid/68983
tools	www.tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-5119
lists	www.lists.opensuse.org/opensuse-security-announce/2014-09/msg00017.html
mandriva	www.mandriva.com/security/advisories
secunia	www.secunia.com/advisories/60345
googleprojectzero	www.googleprojectzero.blogspot.com/2014/08/the-poisoned-nul-byte-2014-edition.html
linux	www.linux.oracle.com/errata/ELSA-2015-0092.html
debian	www.debian.org/security/2014/dsa-3012

06 May 2026 22:30Current

8.6High risk

Vulners AI Score8.6

CVSS 27.5

EPSS0.21511

CWE-189