CVE

Id
71905  
CVE No.
CVE-2014-4608  
Status
Candidate  
Description
** DISPUTED ** Multiple integer overflows in the lzo1x_decompress_safe function in lib/lzo/lzo1x_decompress_safe.c in the LZO decompressor in the Linux kernel before 3.15.2 allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Literal Run. NOTE: the author of the LZO algorithms says "the Linux kernel is *not* affected; media hype."  
Phase
Assigned (20140623)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
682314 71905 CVE-2014-4608 MLIST:[oss-security] 20140626 LMS-2014-06-16-2: Linux Kernel LZO  View
682315 71905 CVE-2014-4608 URL:http://www.openwall.com/lists/oss-security/2014/06/26/21  View
682316 71905 CVE-2014-4608 MISC:http://blog.securitymouse.com/2014/06/raising-lazarus-20-year-old-bug-that.html  View
682317 71905 CVE-2014-4608 MISC:http://www.oberhumer.com/opensource/lzo/  View
682318 71905 CVE-2014-4608 MISC:https://www.securitymouse.com/lms-2014-06-16-2  View
682319 71905 CVE-2014-4608 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=206a81c18401c0cde6e579164f752c4b147324ce  View
682320 71905 CVE-2014-4608 CONFIRM:http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2  View
682321 71905 CVE-2014-4608 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1113899  View
682322 71905 CVE-2014-4608 CONFIRM:https://github.com/torvalds/linux/commit/206a81c18401c0cde6e579164f752c4b147324ce  View
682323 71905 CVE-2014-4608 REDHAT:RHSA-2015:0062  View
682324 71905 CVE-2014-4608 URL:http://rhn.redhat.com/errata/RHSA-2015-0062.html  View
682325 71905 CVE-2014-4608 SUSE:SUSE-SU-2015:0481  View
682326 71905 CVE-2014-4608 URL:http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00010.html  View
682327 71905 CVE-2014-4608 SUSE:openSUSE-SU-2015:0566  View
682328 71905 CVE-2014-4608 URL:http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00025.html  View
682329 71905 CVE-2014-4608 SUSE:SUSE-SU-2015:0736  View
682330 71905 CVE-2014-4608 URL:http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00015.html  View
682331 71905 CVE-2014-4608 UBUNTU:USN-2416-1  View
682332 71905 CVE-2014-4608 URL:http://www.ubuntu.com/usn/USN-2416-1  View
682333 71905 CVE-2014-4608 UBUNTU:USN-2419-1  View
682334 71905 CVE-2014-4608 URL:http://www.ubuntu.com/usn/USN-2419-1  View
682335 71905 CVE-2014-4608 UBUNTU:USN-2420-1  View
682336 71905 CVE-2014-4608 URL:http://www.ubuntu.com/usn/USN-2420-1  View
682337 71905 CVE-2014-4608 UBUNTU:USN-2421-1  View
682338 71905 CVE-2014-4608 URL:http://www.ubuntu.com/usn/USN-2421-1  View
682339 71905 CVE-2014-4608 UBUNTU:USN-2417-1  View
682340 71905 CVE-2014-4608 URL:http://www.ubuntu.com/usn/USN-2417-1  View
682341 71905 CVE-2014-4608 UBUNTU:USN-2418-1  View
682342 71905 CVE-2014-4608 URL:http://www.ubuntu.com/usn/USN-2418-1  View
682343 71905 CVE-2014-4608 BID:68214  View
682344 71905 CVE-2014-4608 URL:http://www.securityfocus.com/bid/68214  View
682345 71905 CVE-2014-4608 SECUNIA:60011  View
682346 71905 CVE-2014-4608 URL:http://secunia.com/advisories/60011  View
682347 71905 CVE-2014-4608 SECUNIA:60174  View
682348 71905 CVE-2014-4608 URL:http://secunia.com/advisories/60174  View
682349 71905 CVE-2014-4608 SECUNIA:62633  View

Related JVN