CVE-2014-5119: Off-by-one error in the __gconv_translit_find function in gconv_trans.c in GNU C Library (aka glibc) allows...

Security readout for executives and security teams

CVE-2014-5119 is a glibc flaw in character set conversion handling. On affected Linux systems, attacker-controlled character set settings could crash a process or potentially run code, depending on how the program uses environment variables and gconv modules. The bundle does not provide CVSS scoring or a complete affected-version list. Most relevant exposure is legacy Linux, appliance, or embedded systems still running vulnerable glibc builds from affected distributions. Modern maintained distributions are likely patched, but old servers, vendor appliances, and frozen container images need verification. Treat this as a legacy exposure risk rather than a new internet-wide emergency. Prioritize asset discovery and patch verification for older Linux estates, vendor appliances, and long-lived containers, especially where unsupported systems remain in production. Mitigation focus: Inventory Linux hosts, appliances, and containers using glibc from the affected era.; Apply vendor glibc security updates for each distribution or product.; Check Red Hat, Debian, Gentoo, Cisco, IBM, Oracle, and other vendor guidance where applicable..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.