NVD

Id
33660  
Name
CVE-2014-6040  
Description
GNU C Library (aka glibc) before 2.20 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via a multibyte character value of "0xffff" to the iconv function when converting (1) IBM933, (2) IBM935, (3) IBM937, (4) IBM939, or (5) IBM1364 encoded data to UTF-8.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-12-05  
Modified Date
2017-01-02  
Seq
2014-6040  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
174847 33660 CVE-2014-6040 http://linux.oracle.com/errata/ELSA-2015-0016.html  View
174848 33660 CVE-2014-6040 62100  View
174849 33660 CVE-2014-6040 62146  View
174850 33660 CVE-2014-6040 USN-2432-1  View
174851 33660 CVE-2014-6040 DSA-3142  View
174852 33660 CVE-2014-6040 MDVSA-2014:175  View
174853 33660 CVE-2014-6040 [oss-security] 20140829 CVE request: glibc character set conversion from IBM code pages  View
174854 33660 CVE-2014-6040 [oss-security] 20140902 Re: CVE request: glibc character set conversion from IBM code pages  View
174855 33660 CVE-2014-6040 69472  View
174856 33660 CVE-2014-6040 GLSA-201602-02  View
174857 33660 CVE-2014-6040 https://sourceware.org/bugzilla/show_bug.cgi?id=17325  View
174858 33660 CVE-2014-6040 https://sourceware.org/git/gitweb.cgi?p=glibc.git;a=commitdiff;h=41488498b6  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16916 JVNDB-2014-005791 GNU C Library におけるサービス運用妨害 (DoS) の脆弱性 GNU C Library (別名 glibc) には、サービス運用妨害 (out-of-bounds read およびクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-6040 73331 CVE-2014-6040 33660 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005791.html 2014-09-03 2014-12-08 View