CVE - CVE-2014-4608

CVE-ID
CVE-2014-4608	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
DISPUTED Multiple integer overflows in the lzo1x_decompress_safe function in lib/lzo/lzo1x_decompress_safe.c in the LZO decompressor in the Linux kernel before 3.15.2 allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Literal Run. NOTE: the author of the LZO algorithms says "the Linux kernel is not affected; media hype."
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:68214 URL:http://www.securityfocus.com/bid/68214 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=206a81c18401c0cde6e579164f752c4b147324ce CONFIRM:http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1113899 CONFIRM:https://github.com/torvalds/linux/commit/206a81c18401c0cde6e579164f752c4b147324ce MISC:http://blog.securitymouse.com/2014/06/raising-lazarus-20-year-old-bug-that.html MISC:http://www.oberhumer.com/opensource/lzo/ MISC:https://www.securitymouse.com/lms-2014-06-16-2 MLIST:[oss-security] 20140626 LMS-2014-06-16-2: Linux Kernel LZO URL:http://www.openwall.com/lists/oss-security/2014/06/26/21 REDHAT:RHSA-2015:0062 URL:http://rhn.redhat.com/errata/RHSA-2015-0062.html SECUNIA:60011 URL:http://secunia.com/advisories/60011 SECUNIA:60174 URL:http://secunia.com/advisories/60174 SECUNIA:62633 URL:http://secunia.com/advisories/62633 SUSE:SUSE-SU-2015:0481 URL:http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html SUSE:SUSE-SU-2015:0736 URL:http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html SUSE:openSUSE-SU-2015:0566 URL:http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html UBUNTU:USN-2416-1 URL:http://www.ubuntu.com/usn/USN-2416-1 UBUNTU:USN-2417-1 URL:http://www.ubuntu.com/usn/USN-2417-1 UBUNTU:USN-2418-1 URL:http://www.ubuntu.com/usn/USN-2418-1 UBUNTU:USN-2419-1 URL:http://www.ubuntu.com/usn/USN-2419-1 UBUNTU:USN-2420-1 URL:http://www.ubuntu.com/usn/USN-2420-1 UBUNTU:USN-2421-1 URL:http://www.ubuntu.com/usn/USN-2421-1
Assigning CNA
MITRE Corporation
Date Record Created
20140623	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20140623)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)