7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.015 Low
EPSS
Percentile
84.8%
The glibc packages contain the standard C libraries used by multiple
programs on the system. These packages contain the standard C and the
standard math libraries. Without these two libraries, a Linux system cannot
function properly.
An off-by-one heap-based buffer overflow flaw was found in glibc’s internal
__gconv_translit_find() function. An attacker able to make an application
call the iconv_open() function with a specially crafted argument could
possibly use this flaw to execute arbitrary code with the privileges of
that application. (CVE-2014-5119)
A directory traveral flaw was found in the way glibc loaded locale files.
An attacker able to make an application use a specially crafted locale name
value (for example, specified in an LC_* environment variable) could
possibly use this flaw to execute arbitrary code with the privileges of
that application. (CVE-2014-0475)
Red Hat would like to thank Stephane Chazelas for reporting CVE-2014-0475.
All glibc users are advised to upgrade to these updated packages, which
contain backported patches to correct these issues.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | 6 | i686 | glibc-static | < 2.12-1.132.el6_5.4 | glibc-static-2.12-1.132.el6_5.4.i686.rpm |
RedHat | 7 | i686 | glibc-debuginfo | < 2.17-55.el7_0.1 | glibc-debuginfo-2.17-55.el7_0.1.i686.rpm |
RedHat | 6 | s390x | glibc-common | < 2.12-1.132.el6_5.4 | glibc-common-2.12-1.132.el6_5.4.s390x.rpm |
RedHat | 6 | i686 | glibc-utils | < 2.12-1.132.el6_5.4 | glibc-utils-2.12-1.132.el6_5.4.i686.rpm |
RedHat | 7 | s390 | glibc-debuginfo | < 2.17-55.el7_0.1 | glibc-debuginfo-2.17-55.el7_0.1.s390.rpm |
RedHat | 7 | s390x | glibc-common | < 2.17-55.el7_0.1 | glibc-common-2.17-55.el7_0.1.s390x.rpm |
RedHat | 7 | ppc | glibc-devel | < 2.17-55.el7_0.1 | glibc-devel-2.17-55.el7_0.1.ppc.rpm |
RedHat | 7 | x86_64 | nscd | < 2.17-55.el7_0.1 | nscd-2.17-55.el7_0.1.x86_64.rpm |
RedHat | 7 | ppc64 | glibc-common | < 2.17-55.el7_0.1 | glibc-common-2.17-55.el7_0.1.ppc64.rpm |
RedHat | 7 | ppc64 | glibc | < 2.17-55.el7_0.1 | glibc-2.17-55.el7_0.1.ppc64.rpm |