CVE

Id
71953  
CVE No.
CVE-2014-4656  
Status
Candidate  
Description
Multiple integer overflows in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allow local users to cause a denial of service by leveraging /dev/snd/controlCX access, related to (1) index values in the snd_ctl_add function and (2) numid values in the snd_ctl_remove_numid_conflict function.  
Phase
Assigned (20140625)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
682665 71953 CVE-2014-4656 MLIST:[oss-security] 20140626 Re: CVE Request: Linux kernel ALSA core control API vulnerabilities  View
682666 71953 CVE-2014-4656 URL:http://www.openwall.com/lists/oss-security/2014/06/26/6  View
682667 71953 CVE-2014-4656 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=883a1d49f0d77d30012f114b2e19fc141beb3e8e  View
682668 71953 CVE-2014-4656 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ac902c112d90a89e59916f751c2745f4dbdbb4bd  View
682669 71953 CVE-2014-4656 CONFIRM:http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2  View
682670 71953 CVE-2014-4656 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1113470  View
682671 71953 CVE-2014-4656 CONFIRM:https://github.com/torvalds/linux/commit/883a1d49f0d77d30012f114b2e19fc141beb3e8e  View
682672 71953 CVE-2014-4656 CONFIRM:https://github.com/torvalds/linux/commit/ac902c112d90a89e59916f751c2745f4dbdbb4bd  View
682673 71953 CVE-2014-4656 CONFIRM:https://source.android.com/security/bulletin/2017-04-01  View
682674 71953 CVE-2014-4656 REDHAT:RHSA-2014:1083  View
682675 71953 CVE-2014-4656 URL:http://rhn.redhat.com/errata/RHSA-2014-1083.html  View
682676 71953 CVE-2014-4656 REDHAT:RHSA-2015:0087  View
682677 71953 CVE-2014-4656 URL:http://rhn.redhat.com/errata/RHSA-2015-0087.html  View
682678 71953 CVE-2014-4656 SUSE:SUSE-SU-2015:0812  View
682679 71953 CVE-2014-4656 URL:http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html  View
682680 71953 CVE-2014-4656 UBUNTU:USN-2334-1  View
682681 71953 CVE-2014-4656 URL:http://www.ubuntu.com/usn/USN-2334-1  View
682682 71953 CVE-2014-4656 UBUNTU:USN-2335-1  View
682683 71953 CVE-2014-4656 URL:http://www.ubuntu.com/usn/USN-2335-1  View
682684 71953 CVE-2014-4656 SECUNIA:59434  View
682685 71953 CVE-2014-4656 URL:http://secunia.com/advisories/59434  View
682686 71953 CVE-2014-4656 SECUNIA:59777  View
682687 71953 CVE-2014-4656 URL:http://secunia.com/advisories/59777  View
682688 71953 CVE-2014-4656 SECUNIA:60564  View
682689 71953 CVE-2014-4656 URL:http://secunia.com/advisories/60564  View
682690 71953 CVE-2014-4656 SECUNIA:60545  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
16379 JVNDB-2014-005254 WordPress 用 Wordfence Security プラグインにおけるクロスサイトスクリプティングの脆弱性 WordPress 用 Wordfence Security プラグインには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-4664 71953 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005254.html  View