Multiple directory traversal vulnerabilities in GNU C Library (aka glibc or libc6) before 2.20 allow context-dependent attackers to bypass…

published 2014-07-29 12 y ago modified 2026-06-17 4 mo ago also EUVD-2014-0510

cvss: 6.8; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 2.8%; EPSS 2.8% chance of exploitation in 30 days, percentile 86%
public exploits: 0; none known

Multiple directory traversal vulnerabilities in GNU C Library (aka glibc or libc6) before 2.20 allow context-dependent attackers to bypass ForceCommand restrictions and possibly have other unspecified impact via a .. (dot dot) in a (1) LC_*, (2) LANG, or other locale environment variable.

Patch / fix

distros 4

debian ubuntu red hat opensuse

glibc Debian 14, Debian 13, Debian 12 2.19-6

debian advisories DEBIAN-CVE-2014-0475

eglibc Ubuntu 14.04 LTS 2.19-0ubuntu6.1

ubuntu advisories UBUNTU-CVE-2014-0475

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

glibc RHEL 5 2.5-118.el5_10.3
glibc RHEL 6 2.12-1.132.el6_5.4
glibc RHEL 7 2.17-55.el7_0.1
nscd RHEL 5 2.5-118.el5_10.3
nscd RHEL 6 2.12-1.132.el6_5.4
nscd RHEL 7 2.17-55.el7_0.1
glibc-utils RHEL 5 2.5-118.el5_10.3
glibc-utils RHEL 6 2.12-1.132.el6_5.4

red hat advisories RHSA-2014:1110

glibc openSUSE Tumbleweed 2.24-2.3

opensuse advisories openSUSE-SU-2024:10154-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2014-0475 updated 2026-11-05 cvss 6.0

glibc: directory traversal in LC_* locale handling

Red Hat Enterprise Linux (v. 5 server) nscd 2.5-118.el5_10.3, glibc 2.5-118.el5_10.3, glibc-utils 2.5-118.el5_10.3, glibc-common 2.5-118.el5_10.3, glibc-debuginfo-common 2.5-118.el5_10.3 Red Hat Enterprise Linux Client (v. 7) nscd 2.17-55.el7_0.1, glibc 2.17-55.el7_0.1, glibc-utils 2.17-55.el7_0.1, glibc-common 2.17-55.el7_0.1, glibc-debuginfo-common 2.17-55.el7_0.1 Red Hat Enterprise Linux Client Optional (v. 7) glibc-debuginfo-common 2.17-55.el7_0.1 Red Hat Enterprise Linux ComputeNode (v. 7) nscd 2.17-55.el7_0.1, glibc 2.17-55.el7_0.1, glibc-utils 2.17-55.el7_0.1, glibc-common 2.17-55.el7_0.1, glibc-debuginfo-common 2.17-55.el7_0.1 Red Hat Enterprise Linux ComputeNode Optional (v. 7) glibc-debuginfo-common 2.17-55.el7_0.1 Red Hat Enterprise Linux Desktop (v. 5 client) nscd 2.5-118.el5_10.3, glibc 2.5-118.el5_10.3, glibc-utils 2.5-118.el5_10.3, glibc-common 2.5-118.el5_10.3, glibc-debuginfo-common 2.5-118.el5_10.3

+12 more productsfewer

Red Hat Enterprise Linux Desktop (v. 6) nscd 2.12-1.132.el6_5.4, glibc 2.12-1.132.el6_5.4, glibc-utils 2.12-1.132.el6_5.4, glibc-common 2.12-1.132.el6_5.4, glibc-debuginfo-common 2.12-1.132.el6_5.4 Red Hat Enterprise Linux Desktop Optional (v. 6) glibc 2.12-1.132.el6_5.4, glibc-debuginfo-common 2.12-1.132.el6_5.4 Red Hat Enterprise Linux HPC Node (v. 6) nscd 2.12-1.132.el6_5.4, glibc 2.12-1.132.el6_5.4, glibc-utils 2.12-1.132.el6_5.4, glibc-common 2.12-1.132.el6_5.4, glibc-debuginfo-common 2.12-1.132.el6_5.4 Red Hat Enterprise Linux HPC Node Optional (v. 6) glibc 2.12-1.132.el6_5.4, glibc-debuginfo-common 2.12-1.132.el6_5.4 Red Hat Enterprise Linux Server (v. 6) nscd 2.12-1.132.el6_5.4, glibc 2.12-1.132.el6_5.4, glibc-utils 2.12-1.132.el6_5.4, glibc-common 2.12-1.132.el6_5.4, glibc-debuginfo-common 2.12-1.132.el6_5.4 Red Hat Enterprise Linux Server (v. 7) nscd 2.17-55.el7_0.1, glibc 2.17-55.el7_0.1, glibc-utils 2.17-55.el7_0.1, glibc-common 2.17-55.el7_0.1, glibc-debuginfo-common 2.17-55.el7_0.1 Red Hat Enterprise Linux Server Optional (v. 6) glibc 2.12-1.132.el6_5.4, glibc-debuginfo-common 2.12-1.132.el6_5.4 Red Hat Enterprise Linux Server Optional (v. 7) glibc-debuginfo-common 2.17-55.el7_0.1 Red Hat Enterprise Linux Workstation (v. 6) nscd 2.12-1.132.el6_5.4, glibc 2.12-1.132.el6_5.4, glibc-utils 2.12-1.132.el6_5.4, glibc-common 2.12-1.132.el6_5.4, glibc-debuginfo-common 2.12-1.132.el6_5.4 Red Hat Enterprise Linux Workstation (v. 7) nscd 2.17-55.el7_0.1, glibc 2.17-55.el7_0.1, glibc-utils 2.17-55.el7_0.1, glibc-common 2.17-55.el7_0.1, glibc-debuginfo-common 2.17-55.el7_0.1 Red Hat Enterprise Linux Workstation Optional (v. 6) glibc 2.12-1.132.el6_5.4, glibc-debuginfo-common 2.12-1.132.el6_5.4 Red Hat Enterprise Linux Workstation Optional (v. 7) glibc-debuginfo-common 2.17-55.el7_0.1

fixed: vendor fix RHSA-2014:1110

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

2.79% chance of exploitation in the next 30 days, higher than 86% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by	version	score	vector
NVD	2.0	6.8	AV:N/AC:M/Au:N/C:P/I:P/A:P

Classification

Weakness

CWE-22 Improper Limitation of a Pathname to a Restricted Directory

References

debian.org /security/2014/dsa-2976
vendor-advisory
rhn.redhat.com /errata/RHSA-2014-1110.html
vendor-advisory
security.gentoo.org /glsa/201602-02
vendor-advisory
mandriva.com /security/advisories?name=MDVSA-2014:152
vendor-advisory
securityfocus.com /bid/68505
vdb-entry
securitytracker.com /id/1030569
vdb-entry
openwall.com /lists/oss-security/2014/07/14/6
mailing-list
sourceware.org /bugzilla/show_bug.cgi?id=17137
openwall.com /lists/oss-security/2014/07/10/7
mailing-list
linux.oracle.com /errata/ELSA-2015-0092.html

Sources

CVE List CVE-2014-0475
NVD CVE-2014-0475

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary