GNU libc: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Benutzerrechten

Summary

Product

Vulnerabilities 1

• Unscored —
  CVE-2014-5119 Public exploit EPSS 17%

  Off-by-one error in the __gconv_translit_find function in gconv_trans.c in GNU C Library (aka glibc) allows context-dep…

  glibc eglibc Debian Ubuntu
  Aug 29, 2014

Revision history

1. 2023-02-27 #24

   Neue Updates von IBM aufgenommen

2. 2015-03-30 #23

   New remediations available

3. 2014-09-15 #20

   New remediations available

4. 2014-09-15 #21

   Version nicht vorhanden

5. 2014-09-15 #22

   New remediations available

6. 2014-09-14 #19

   New remediations available

7. 2014-09-11 #15

   New remediations available

8. 2014-09-11 #16

   Version nicht vorhanden

9. 2014-09-11 #17

   New remediations available

10. 2014-09-11 #18

    Version nicht vorhanden

11. 2014-09-02 #11

    New remediations available

12. 2014-09-02 #12

    New remediations available

13. 2014-09-02 #13

    New remediations available

14. 2014-09-02 #14

    Version nicht vorhanden

15. 2014-09-01 #9

    New remediations available

16. 2014-09-01 #10

    Version nicht vorhanden

17. 2014-08-31 #7

    New remediations available

18. 2014-08-31 #8

    Version nicht vorhanden

19. 2014-08-28 #5

    New remediations available

20. 2014-08-28 #6

    Version nicht vorhanden

21. 2014-08-26 #3

    New remediations available

22. 2014-08-26 #4

    Version nicht vorhanden

23. 2014-08-25 #1

    Initial Release

24. 2014-08-25 #2

    Version nicht vorhanden

References

• IBM Security Bulletin 690127 vom 2023-02-28
  https://www.ibm.com/support/pages/node/690127
• Mailingliste Full Disclosure vom 2014-08-25
  http://seclists.org/fulldisclosure/2014/Aug/69
• Debian Security Advisory DSA-3012-1 vom 2014-08-27
  http://www.debian.org/security/2014/dsa-3012
• Ubuntu Security Notice USN-2328-1 vom 2014-08-28
  http://www.ubuntu.com/usn/usn-2328-1/
• Red Hat Security Advisory RHSA-2014:1110-1 vom 2014-08-29
  http://rhn.redhat.com/errata/RHSA-2014-1110.html
• Oracle Linux Security Advisory ELSA-2014-1110 vom 2014-08-29
  http://linux.oracle.com/errata/ELSA-2014-1110.html
• CentOS Errata and Security Advisory 2014:1110
  http://lists.centos.org/pipermail/centos-announce/2014-August/020519.html
• CentOS Errata and Security Advisory 2014:1110
  http://lists.centos.org/pipermail/centos-announce/2014-August/020518.html
• CentOS Errata and Security Advisory 2014:1110
  http://lists.centos.org/pipermail/centos-announce/2014-August/020520.html
• SUSE Security Update Announcement ID SUSE-SU-2014:1119-1 vom 2014-09-12
  http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00011.html
• SUSE Security Update Announcement ID SUSE-SU-2014:1122-1 vom 2014-09-12
  http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00013.html
• SuSE Security Announce: Announcement ID: SUSE-SU-2014:1125-1
  http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00017.html
• SuSE Security Announce: Announcement ID: SUSE-SU-2014:1129-1 vom 2014-09-15
  http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00020.html
• Red Hat Security Advisory RHSA-2014:1118-1 vom 2014-09-02
  http://rhn.redhat.com/errata/RHSA-2014-1118.html
• SUSE Security Update: Announcement ID: SUSE-SU-2014:1128-1
  http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00019.html
• Mandriva Security Advisory MDVSA-2015:168 vom 2015-03-30
  http://www.mandriva.com/de/support/security/advisories/advisory/MDVSA-2015%3A168/