CVE-2014-5119 in GNU C Library
Summary
Off-by-one error in the __gconv_translit_find function in gconv_trans.c in GNU C Library (aka glibc) allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via vectors related to the CHARSET environment variable and gconv transliteration modules.
Reservation
07/30/2014
Disclosure
08/29/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 67432 | GNU C Library iconv numeric error | 189 | Proof-of-Concept | Official fix | CVE-2014-5119 |