CVE-2014-5384: Buffer Overflow
The VIQR module in the iconv implementation in FreeBSD 10.0 before p6 and NetBSD allows context-dependent attackers to cause a denial of service (out-of-bounds array access) via a crafted argument to the iconvopen function. NOTE: this issue was SPLIT from CVE-2014-3951 per ADT2 due to different vulnerability types.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-5384?
CVE-2014-5384 has been classified as a denial of service vulnerability.
How do I fix CVE-2014-5384?
To fix CVE-2014-5384, update FreeBSD to version 10.0-p6 or later, or apply the relevant patches provided by the maintainers.
What systems are affected by CVE-2014-5384?
CVE-2014-5384 affects FreeBSD 10.0 before p6 and all versions of NetBSD.
Can CVE-2014-5384 be exploited remotely?
Yes, CVE-2014-5384 can be exploited by context-dependent attackers if they can provide crafted input to the iconv_open function.
What impact does CVE-2014-5384 have?
The impact of CVE-2014-5384 includes potential denial of service due to out-of-bounds array access.