CVE-2014-3951: Null Pointer Dereference
The HZ module in the iconv implementation in FreeBSD 10.0 before p6 and NetBSD allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a crafted argument to the iconvopen function. NOTE: this issue was SPLIT per ADT2 due to different vulnerability types. CVE-2014-5384 is used for the NULL pointer dereference.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3951?
CVE-2014-3951 has a severity that can lead to denial of service due to a NULL pointer dereference.
How do I fix CVE-2014-3951?
To fix CVE-2014-3951, you should apply the latest patches from FreeBSD or NetBSD that address this vulnerability.
Which systems are affected by CVE-2014-3951?
CVE-2014-3951 affects FreeBSD version 10.0 before p6 and NetBSD due to a flaw in the iconv implementation.
What type of attack can be executed using CVE-2014-3951?
CVE-2014-3951 allows context-dependent attackers to execute a denial of service attack through a crafted argument to the iconv_open function.
Is CVE-2014-3951 exploitable remotely?
Yes, CVE-2014-3951 can be exploited remotely by attackers who can provide crafted inputs to the vulnerable function.