CVE-2014-6040: Buffer Overflow
GNU C Library (aka glibc) before 2.20 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via a multibyte character value of "0xffff" to the iconv function when converting (1) IBM933, (2) IBM935, (3) IBM937, (4) IBM939, or (5) IBM1364 encoded data to UTF-8.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-6040?
CVE-2014-6040 has been classified as a denial of service vulnerability that can cause application crashes.
How do I fix CVE-2014-6040?
To fix CVE-2014-6040, update the GNU C Library to version 2.20 or later.
What systems are affected by CVE-2014-6040?
CVE-2014-6040 affects versions of the GNU C Library prior to 2.20, including multiple legacy versions.
What kind of attack does CVE-2014-6040 facilitate?
CVE-2014-6040 allows context-dependent attackers to exploit an out-of-bounds read resulting in a denial of service.
Is CVE-2014-6040 commonly exploited?
While CVE-2014-6040 represents a serious risk, it requires specific conditions to be effectively exploited.