CVE-2014-0475: Multiple directory traversal vulnerabilities in GNU C Library (aka glibc or libc6) before 2.20 allow contex...

Security readout for executives and security teams

This is an old glibc locale-handling flaw. On affected Linux systems, crafted locale environment values could traverse directories and may bypass SSH ForceCommand restrictions. Business urgency is mainly for legacy or unpatched Linux estates, especially systems relying on ForceCommand for restricted access. Exposure is most likely on Linux distributions still running glibc/libc6 versions before 2.20 or vendor packages without the backported fix. Systems using SSH ForceCommand or other controls affected by untrusted locale environment variables deserve priority review. Treat this as a legacy Linux hygiene and access-control risk. It should not displace actively exploited critical issues, but it should be closed on systems where restricted command execution is part of the security boundary. Mitigation focus: Apply vendor glibc/libc6 updates from the relevant Linux distribution advisory.; Prioritize systems using SSH ForceCommand or restricted shell patterns.; Review service wrappers for untrusted LC_*, LANG, and locale environment variables..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.