Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-4608
HistoryJul 03, 2014 - 4:22 a.m.

CVE-2014-4608

2014-07-0304:22:15
CWE-190
[email protected]
web.nvd.nist.gov
92
In Wild
cve-2014-4608
integer overflows
lzo1x_decompress_safe
linux kernel
memory corruption
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

5.7 Medium

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.6%

JSON

Multiple integer overflows in the lzo1x_decompress_safe function in lib/lzo/lzo1x_decompress_safe.c in the LZO decompressor in the Linux kernel before 3.15.2 allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Literal Run. NOTE: the author of the LZO algorithms says "the Linux kernel is not affected; media hype.

Affected configurations

NVD
Node
linuxlinux_kernelRange<3.15.2
Node
opensuseopensuseMatch11.4
OR
suselinux_enterprise_real_time_extensionMatch11sp3
OR
suselinux_enterprise_serverMatch11sp2ltss
Node
canonicalubuntu_linuxMatch10.04-
OR
canonicalubuntu_linuxMatch12.04esm
OR
canonicalubuntu_linuxMatch14.04esm
OR
canonicalubuntu_linuxMatch14.10

References

Related

freebsd 1
nessus 32
debiancve 1
f5 2
securityvulns 3
ubuntucve 1
nvd 1
cvelist 1
prion 1
openvas 29
ubuntu 9
cisa 1
amazon 1
thn 1
redhat 2
veracode 3
oraclelinux 1
centos 1
suse 10
fedora 2
freebsd
freebsd
LZO -- potential buffer overrun when processing malicious input data
2014-06-25 00:00:00
nessus
nessus
FreeBSD : LZO -- potential buffer overrun when processing malicious input data (d1f5e12a-fd5a-11e3-a108-080027ef73ec)
2014-06-27 00:00:00
Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-2416-1)
2014-11-25 00:00:00
Ubuntu 12.04 LTS : linux vulnerabilities (USN-2283-1)
2014-07-17 00:00:00
debiancve
debiancve
CVE-2014-4608
2014-07-03 04:22:15
f5
f5
SOL15512 - LZO decompressor vulnerability CVE-2014-4608
2014-08-18 00:00:00
K15512 : LZO decompressor vulnerability CVE-2014-4608
2014-08-18 00:00:00
securityvulns
securityvulns
[oss-security] LMS-2014-06-16-2: Linux Kernel LZO
2014-06-28 00:00:00
[USN-2289-1] Linux kernel vulnerabilities
2014-07-21 00:00:00
Linux kernel multiple security vulnerabilities
2014-07-21 00:00:00
ubuntucve
ubuntucve
CVE-2014-4608
2014-07-03 00:00:00
nvd
nvd
CVE-2014-4608
2014-07-03 04:22:15
cvelist
cvelist
CVE-2014-4608
2014-07-03 01:00:00
prion
prion
Integer overflow
2014-07-03 04:22:00
openvas
openvas
Ubuntu: Security Advisory (USN-2415-1)
2022-08-26 00:00:00
Ubuntu: Security Advisory (USN-2416-1)
2022-08-26 00:00:00
Ubuntu: Security Advisory (USN-2421-1)
2022-08-26 00:00:00
ubuntu
ubuntu
Linux kernel (EC2) vulnerabilities
2014-11-25 00:00:00
Linux kernel vulnerability
2014-11-25 00:00:00
Linux kernel vulnerabilities
2014-11-25 00:00:00
cisa
cisa
Vulnerabilities in LZO and LZ4 compression libraries
2014-07-21 00:00:00
amazon
amazon
Medium: kernel
2014-07-09 16:29:00
thn
thn
20-Year Old Vulnerability in LZO Compression Algorithm Went to Planet Mars
2014-06-27 05:43:00
redhat
redhat
(RHSA-2015:0062) Important: kernel security, bug fix, and enhancement update
2015-01-20 00:00:00
(RHSA-2014:1392) Important: kernel security, bug fix, and enhancement update
2014-10-14 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:12:40
Denial Of Service (DoS)
2019-05-02 05:12:39
Denial Of Service (DoS)
2019-05-02 05:12:40
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2014-10-20 00:00:00
centos
centos
kernel, perf, python security update
2014-10-20 18:09:23
suse
suse
Security update for Linux kernel (important)
2014-12-23 19:06:22
Security update for Linux kernel (important)
2014-12-24 08:08:49
Security update for the Linux Kernel (important)
2015-03-24 07:04:48
fedora
fedora
[SECURITY] Fedora 20 Update: kernel-3.14.9-200.fc20
2014-06-30 10:29:23
[SECURITY] Fedora 19 Update: kernel-3.14.13-100.fc19
2014-07-25 10:08:51

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

5.7 Medium

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.6%

JSON
Related for CVE-2014-4608
freebsd1nessus32debiancve1f52securityvulns3ubuntucve1nvd1cvelist1prion1openvas29ubuntu9cisa1amazon1thn1redhat2veracode3oraclelinux1centos1suse10fedora2