NetSight
IP …
high7.3

CVE-2014-4608

Multiple integer overflows in the lzo1x_decompress_safe function in lib/lzo/lzo1x_decompress_safe.c in the LZO decompressor in the Linux kernel before 3.15.2 a…

Impact

Multiple integer overflows in the lzo1x_decompress_safe function in lib/lzo/lzo1x_decompress_safe.c in the LZO decompressor in the Linux kernel before 3.15.2 allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Literal Run. NOTE: the author of the LZO algorithms says "the Linux kernel is *not* affected; media hype.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.15.2
OpensuseOpensuse
Version 11.4
SuseLinux Enterprise Real Time Extension
Version 11
SuseLinux Enterprise Server
Version 11
CanonicalUbuntu Linux
Versions 10.04, 12.04, 14.04, 14.10

Weakness classification

CWE-190

References