Critical severity9.8NVD Advisory· Published Jul 3, 2019· Updated Jun 17, 2026
CVE-2019-5600
CVE-2019-5600
Description
In FreeBSD 12.0-STABLE before r349622, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349624, 11.3-RC3 before 11.3-RC3-p1, and 11.2-RELEASE before 11.2-RELEASE-p11, a bug in iconv implementation may allow an attacker to write past the end of an output buffer. Depending on the implementation, an attacker may be able to create a denial of service, provoke incorrect program behavior, or induce a remote code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
20cpe:2.3:o:freebsd:freebsd:11.2:-:*:*:*:*:*:*+ 19 more
- cpe:2.3:o:freebsd:freebsd:11.2:-:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.2:p10:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.2:p2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.2:p3:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.2:p4:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.2:p5:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.2:p6:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.2:p7:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.2:p9:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.2:rc3:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.3:rc3:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.0:-:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.0:p1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.0:p2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.0:p3:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.0:p4:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.0:p5:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.0:p6:*:*:*:*:*:*
- (no CPE)range: FreeBSD 12.0 before 12.0-RELEASE-p7 and 11.2 before 11.2-RELEASE-p11
- (no CPE)range: < 12.0-RELEASE-p7, < 11.3-RC3-p1, < 11.2-RELEASE-p11
Patches
Vulnerability mechanics
References
2- packetstormsecurity.com/files/153520/FreeBSD-Security-Advisory-FreeBSD-SA-19-09.iconv.htmlnvdThird Party AdvisoryVDB Entry
- security.freebsd.org/advisories/FreeBSD-SA-19:09.iconv.ascnvdVendor Advisory
News mentions
0No linked articles in our index yet.