glibc, nscd security update

CentOS Errata and Security Advisory CESA-2014:1110 Updated glibc packages that fix two security issues are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base...

CVE-2014-5119

CVE-2014-5119 is an off-by-one error in glibc’s gconv transliteration loading code (__gconv_translit_find, gconv_trans.c) that allows context-dependent attackers to crash or execute arbitrary code via crafted CHARSET environment variable input. Affected: glibc and related packages; impact: denial...

CVE-2014-5119

Off-by-one error in the gconvtranslitfind function in gconvtrans.c in GNU C Library aka glibc allows context-dependent attackers to cause a denial of service crash or execute arbitrary code via vectors related to the CHARSET environment variable and gconv transliteration modules...

DEBIAN-CVE-2014-5119

Off-by-one error in the gconvtranslitfind function in gconvtrans.c in GNU C Library aka glibc allows context-dependent attackers to cause a denial of service crash or execute arbitrary code via vectors related to the CHARSET environment variable and gconv transliteration modules...

SUSE-RU-2015:0794-1 Security update for glibc

This glibc update fixes a critical privilege escalation problem and two non-security issues: bnc892073: An off-by-one error leading to a heap-based buffer overflow was found in gconvtranslitfind. An exploit that targets the problem is publicly available. CVE-2014-5119 bnc892065:...

SUSE-SU-2015:0253-1 Security update for glibc

This glibc update fixes a critical privilege escalation problem and two non-security issues: bnc892073: An off-by-one error leading to a heap-based buffer overflow was found in gconvtranslitfind. An exploit that targets the problem is publicly available. CVE-2014-5119 bnc892065:...

SUSE-SU-2015:0439-1 Security update for glibc

This glibc update fixes a critical privilege escalation problem and two non-security issues: bnc892073: An off-by-one error leading to a heap-based buffer overflow was found in gconvtranslitfind. An exploit that targets the problem is publicly available. CVE-2014-5119 bnc892065:...

Fedora Update for glibc FEDORA-2014-9824

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

glibc security update

2.12-1.132.4 - Remove gconv transliteration loadable modules support CVE-2014-5119, - nlfindlocale: Improve handling of crafted locale names CVE-2014-0475,...

Fedora 20 : glibc-2.18-14.fc20 (2014-9824)

Locale names, including those obtained from environment variables LANG and the LC variables, are more tightly checked for proper syntax. setlocale will now fail with EINVAL for locale names that are overly long, contain slashes without starting with a slash, or contain '..' path components...

[SECURITY] Fedora 20 Update: glibc-2.18-14.fc20

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

glibc - NUL Byte gconv_translit_find Off-by-One

// // Full Exploit: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/34421.tar.gz CVE-2014-5119.tar.gz // // // --------------------------------------------------- // CVE-2014-5119 glibc gconvtranslitfind exploit // ------------------------ taviso & scarybeasts ---...

glibc Off-by-One NUL Byte gconv_translit_find Exploit

glibc gconvtranslitfind single-fixed-byte heap metadata overflow local root exploit for Fedora 20 32-bit. This issue is not specific to Fedora, but the proof of concept is specifically for Fedora 20 32-bit. // --------------------------------------------------- // CVE-2014-5119 glibc...

glibc - NUL Byte gconv_translit_find Off-by-One

glibc - NUL Byte gconvtranslitfind Off-by-One // // Full Exploit: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/34421.tar.gz CVE-2014-5119.tar.gz // // // --------------------------------------------------- // CVE-2014-5119 glibc gconvtranslitfind exploit //...

The poisoned NUL byte, 2014 edition

Posted by Chris Evans, Exploit Writer Underling to Tavis Ormandy Back in this 1998 post to the Bugtraq mailing list, Olaf Kirch outlined an attack he called “The poisoned NUL byte”. It was an off-by-one error leading to writing a NUL byte outside the bounds of the current stack frame. On i386...

SuSE 11.3 Security Update : glibc (SAT Patch Number 9587)

This glibc update contains one security and two non security fixes : - directory traversal in LC locale handling. CVE-2014-0475. bnc887022 - nscd gets activated upon upgrade. bnc882028 - iconv command inserts a extra control code '0F'. bnc886416 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

glibc use-after-free

posixspawnfileactionsaddopen use-fater-free...

[ MDVSA-2014:152 ] glibc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:152 http://www.mandriva.com/en/support/security/ Package : glibc Date : August 6, 2014 Affected: Business Server 1.0 Problem Description: Updated glibc packages fix security issues: Stephane Chazelas...

Mandriva Linux Security Advisory : glibc (MDVSA-2014:152)

Updated glibc packages fix security issues : Stephane Chazelas discovered that directory traversal issue in locale handling in glibc. glibc accepts relative paths with .. components in the LC and LANG variables. Together with typical OpenSSH configurations with suitable AcceptEnv settings in...

MGASA-2014-0314 Updated glibc packages fix security issues

Stephane Chazelas discovered that directory traversal issue in locale handling in glibc. glibc accepts relative paths with ".." components in the LC and LANG variables. Together with typical OpenSSH configurations with suitable AcceptEnv settings in sshdconfig, this could conceivably be used to...