{"attribution":"This product uses data from the NVD API but is not endorsed or certified by the NVD.","cve":{"id":"CVE-2014-5384","sourceIdentifier":"cve@mitre.org","published":"2014-08-21T22:55:03.690","lastModified":"2026-06-17T00:11:27.940","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The VIQR module in the iconv implementation in FreeBSD 10.0 before p6 and NetBSD allows context-dependent attackers to cause a denial of service (out-of-bounds array access) via a crafted argument to the iconv_open function.  NOTE: this issue was SPLIT from CVE-2014-3951 per ADT2 due to different vulnerability types."},{"lang":"es","value":"El módulo VIQR en la implementación iconv en FreeBSD 10.0 anterior a p6 y NetBSD permite a atacantes dependientes de contexto causar una denegación de servicio (acceso a array fuera de rango) a través de un argumento manipulado en la función iconv_open. NOTA: este problema ha sido dividido (SPLIT) del CVE-2014-3951 por ADT2 debido a diferentes tipos de vulnerabilidad."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:10.0:*:*:*:*:*:*:*","matchCriteriaId":"CA79CE41-D873-4A4A-A20C-83EB8772E5FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*","matchCriteriaId":"B55E4B92-88E0-41F0-AFA7-046A8D34A2CA"}]}]}],"references":[{"url":"http://mail-index.netbsd.org/source-changes/2014/06/24/msg055822.html","source":"cve@mitre.org"},{"url":"http://www.freebsd.org/security/advisories/FreeBSD-SA-14:15.iconv.asc","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1030458","source":"cve@mitre.org"},{"url":"http://mail-index.netbsd.org/source-changes/2014/06/24/msg055822.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.freebsd.org/security/advisories/FreeBSD-SA-14:15.iconv.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1030458","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}