CVEvulnerability

CVE-2014-6040

5.0 MEDIUM Published 2014-12-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-12-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-119

Description

GNU C Library (aka glibc) before 2.20 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via a multibyte character value of "0xffff" to the iconv function when converting (1) IBM933, (2) IBM935, (3) IBM937, (4) IBM939, or (5) IBM1364 encoded data to UTF-8.

Affected configurations

• gnu glibc (<= 2.19) • gnu glibc 2.0 • gnu glibc 2.0.1 • gnu glibc 2.0.2 • gnu glibc 2.0.3 • gnu glibc 2.0.4 • gnu glibc 2.0.5 • gnu glibc 2.0.6 • gnu glibc 2.1 • gnu glibc 2.1.1 • gnu glibc 2.1.1.6 • gnu glibc 2.1.2 • gnu glibc 2.1.3 • gnu glibc 2.1.9 • gnu glibc 2.10.1 • gnu glibc 2.11 • gnu glibc 2.11.1 • gnu glibc 2.11.2 • gnu glibc 2.11.3 • gnu glibc 2.12 • gnu glibc 2.12.1 • gnu glibc 2.12.2 • gnu glibc 2.13 • gnu glibc 2.14 • gnu glibc 2.14.1 • gnu glibc 2.15 • gnu glibc 2.16 • gnu glibc 2.17 • gnu glibc 2.18

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References