CVE-2014-5119

2014-08-2600:00:00

ubuntu.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

84.7%

JSON

Off-by-one error in the __gconv_translit_find function in gconv_trans.c in
GNU C Library (aka glibc) allows context-dependent attackers to cause a
denial of service (crash) or execute arbitrary code via vectors related to
the CHARSET environment variable and gconv transliteration modules.

Bugs

Notes

Author	Note
jdstrand	per researcher (Chris Evans), a path with an even number of characters to the gconv/ directory makes his exploit harmless. This happens to be true on Ubuntu with multiarch on 12.04 LTS and higher on amd64 and i386. Ubuntu 10.04 LTS and armhf on all supported releases has an odd path length. There are likely other ways to exploit on Ubuntu. eglibc on 14.10 exists but is scheduled to be removed the severity was bumped from medium to high once additional research was revealed on 2014-08-26 (marked PublicDateAtUSN accordingly). There are no known active exploits against Ubuntu as of 2014-08-28, but they will likely be available soon.

Author

Note

jdstrand

per researcher (Chris Evans), a path with an even number of characters to the gconv/ directory makes his exploit harmless. This happens to be true on Ubuntu with multiarch on 12.04 LTS and higher on amd64 and i386. Ubuntu 10.04 LTS and armhf on all supported releases has an odd path length. There are likely other ways to exploit on Ubuntu. eglibc on 14.10 exists but is scheduled to be removed the severity was bumped from medium to high once additional research was revealed on 2014-08-26 (marked PublicDateAtUSN accordingly). There are no known active exploits against Ubuntu as of 2014-08-28, but they will likely be available soon.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarcheglibc< 2.11.1-0ubuntu7.16UNKNOWN
ubuntu12.04noarcheglibc< 2.15-0ubuntu10.7UNKNOWN
ubuntu14.04noarcheglibc< 2.19-0ubuntu6.3UNKNOWN