Buffer overflow in Freebsd

CVE-2014-5384

The VIQR module in the iconv implementation in FreeBSD 10.0 before p6 and NetBSD allows context-dependent attackers to cause a denial of service (out-of-bounds array access) via a crafted argument to the iconv_open function. NOTE: this issue was SPLIT from CVE-2014-3951 per ADT2 due to different vulnerability types.

Vulnerability class: Buffer Overflow

EPSS: 0.018 (75.8th percentile) — read the EPSS interpretation.

Affected products

Freebsd — versions 10.0
Netbsd
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (x_refsource_FREEBSD, vendor-advisory, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (mailing-list, x_refsource_MLIST)