CVE

Id
71952  
CVE No.
CVE-2014-4655  
Status
Candidate  
Description
The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not properly maintain the user_ctl_count value, which allows local users to cause a denial of service (integer overflow and limit bypass) by leveraging /dev/snd/controlCX access for a large number of SNDRV_CTL_IOCTL_ELEM_REPLACE ioctl calls.  
Phase
Assigned (20140625)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
682642 71952 CVE-2014-4655 MLIST:[oss-security] 20140626 Re: CVE Request: Linux kernel ALSA core control API vulnerabilities  View
682643 71952 CVE-2014-4655 URL:http://www.openwall.com/lists/oss-security/2014/06/26/6  View
682644 71952 CVE-2014-4655 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=82262a46627bebb0febcc26664746c25cef08563  View
682645 71952 CVE-2014-4655 CONFIRM:http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2  View
682646 71952 CVE-2014-4655 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1113445  View
682647 71952 CVE-2014-4655 CONFIRM:https://github.com/torvalds/linux/commit/82262a46627bebb0febcc26664746c25cef08563  View
682648 71952 CVE-2014-4655 REDHAT:RHSA-2014:1083  View
682649 71952 CVE-2014-4655 URL:http://rhn.redhat.com/errata/RHSA-2014-1083.html  View
682650 71952 CVE-2014-4655 SUSE:SUSE-SU-2015:0812  View
682651 71952 CVE-2014-4655 URL:http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html  View
682652 71952 CVE-2014-4655 UBUNTU:USN-2334-1  View
682653 71952 CVE-2014-4655 URL:http://www.ubuntu.com/usn/USN-2334-1  View
682654 71952 CVE-2014-4655 UBUNTU:USN-2335-1  View
682655 71952 CVE-2014-4655 URL:http://www.ubuntu.com/usn/USN-2335-1  View
682656 71952 CVE-2014-4655 BID:68162  View
682657 71952 CVE-2014-4655 URL:http://www.securityfocus.com/bid/68162  View
682658 71952 CVE-2014-4655 SECUNIA:59434  View
682659 71952 CVE-2014-4655 URL:http://secunia.com/advisories/59434  View
682660 71952 CVE-2014-4655 SECUNIA:59777  View
682661 71952 CVE-2014-4655 URL:http://secunia.com/advisories/59777  View
682662 71952 CVE-2014-4655 SECUNIA:60564  View
682663 71952 CVE-2014-4655 URL:http://secunia.com/advisories/60564  View
682664 71952 CVE-2014-4655 SECUNIA:60545  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
14479 JVNDB-2014-003354 TimThumb および WordThumb における任意のコマンドを実行される脆弱性 TimThumb および WordThumb には、Webshot (別名 Webshots) が有効になっている場合、任意のコマンドを実行される脆弱性が存在します。 CVE-2014-4663 71952 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003354.html  View