NVD

Id
32644  
Name
CVE-2014-4715  
Description
Yann Collet LZ4 before r119, when used on certain 32-bit platforms that allocate memory beyond 0x80000000, does not properly detect integer overflows, which allows context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted Literal Run, a different vulnerability than CVE-2014-4611.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-07-03  
Modified Date
2014-07-17  
Seq
2014-4715  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
171903 32644 CVE-2014-4715 http://blog.securitymouse.com/2014/07/i-was-wrong-proving-lz4-exploitable.html  View
171904 32644 CVE-2014-4715 http://fastcompression.blogspot.fr/2014/07/software-vulnerabilities-how-it-works.html  View
171905 32644 CVE-2014-4715 https://code.google.com/p/lz4/issues/detail?id=134  View
171906 32644 CVE-2014-4715 https://code.google.com/p/lz4/source/detail?r=119  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14282 JVNDB-2014-003157 Yann Collet LZ4 におけるサービス運用妨害 (DoS) の脆弱性 Yann Collet LZ4 は、0x80000000 を超えるメモリの割り当てをした特定の 32-bit プラットフォーム上で使用された場合、整数オーバーフローを適切に検出しないため、サービス運用妨害 (メモリ破損) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2014-4715 72004 CVE-2014-4715 32644 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003157.html 2014-07-02 2014-07-07 View