CVEvulnerability

CVE-2014-3951

5.0 MEDIUM Published 2014-08-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-08-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The HZ module in the iconv implementation in FreeBSD 10.0 before p6 and NetBSD allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a crafted argument to the iconv_open function. NOTE: this issue was SPLIT per ADT2 due to different vulnerability types. CVE-2014-5384 is used for the NULL pointer dereference.

Affected configurations

• freebsd freebsd 10.0 • netbsd netbsd

References