CVE-2014-4611 Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4_uncompress function in lib/lz4/lz4_decompress.c in the Linux kernel before 3.15.2, on 32-bit...
MediumCVSS 5.0
EPSS 8.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4_uncompress function in lib/lz4/lz4_decompress.c in the Linux kernel before 3.15.2, on 32-bit platforms might allow context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted Literal Run that would be improperly handled by programs not complying with an API limitation, a different vulnerability than CVE-2014-4715.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/linux(Debian:12) | < 3.14.9-1 | 3.14.9-1 |
| debian/linux(Debian:13) | < 3.14.9-1 | 3.14.9-1 |
| debian/linux(Debian:14) | < 3.14.9-1 | 3.14.9-1 |
| debian/lz4(Debian:12) | < 0.0~r119-1 | 0.0~r119-1 |
| debian/lz4(Debian:13) | < 0.0~r119-1 | 0.0~r119-1 |
| debian/lz4(Debian:14) | < 0.0~r119-1 | 0.0~r119-1 |
| Linux kernel | < 3.15.2 | 3.15.2 |
References
- Debian Security Tracker CVE-2014-4611 vendor-advisory
- blog.securitymouse.com third-party-advisory
- fastcompression.blogspot.fr third-party-advisory
- git.kernel.org
- openSUSE-SU-2014:0924 mailing-list third-party-advisory vendor-advisory
- 59567 third-party-advisory
- 59770 third-party-advisory
- 60238 third-party-advisory
- twitter.com third-party-advisory
- twitter.com third-party-advisory
- www.kernel.org vendor-advisory
- [oss-security] 20140626 LMS-2014-06-16-5: Linux Kernel LZ4 mailing-list third-party-advisory
- 1030491 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking third-party-advisory
- code.google.com third-party-advisory
- code.google.com third-party-advisory
- github.com third-party-advisory
- [hadoop-common-dev] 20210916 [jira] [Created] (HADOOP-17917) Backport HADOOP-15993 to branch-3.2 which Address CVE-2014-4611 mailing-list
- [hadoop-common-issues] 20210928 [jira] [Commented] (HADOOP-17917) Backport HADOOP-15993 to branch-3.2 which address CVE-2014-4611 mailing-list
- [hadoop-common-commits] 20210924 [hadoop] branch branch-3.2 updated: HADOOP-17917. Backport HADOOP-15993 to branch-3.2 which address CVE-2014-4611. Contributed by Brahma Reddy Battula. mailing-list
- [hadoop-common-issues] 20210921 [jira] [Comment Edited] (HADOOP-17917) Backport HADOOP-15993 to branch-3.2 which Address CVE-2014-4611 mailing-list
- [hadoop-common-issues] 20210921 [jira] [Updated] (HADOOP-17917) Backport HADOOP-15993 to branch-3.2 which Address CVE-2014-4611 mailing-list
- [hadoop-common-issues] 20210924 [jira] [Updated] (HADOOP-17917) Backport HADOOP-15993 to branch-3.2 which address CVE-2014-4611 mailing-list
- [hadoop-common-issues] 20210920 [jira] [Updated] (HADOOP-17917) Backport HADOOP-15993 to branch-3.2 which Address CVE-2014-4611 mailing-list
- [hadoop-common-commits] 20210924 [hadoop] branch branch-3.2.3 updated: HADOOP-17917. Backport HADOOP-15993 to branch-3.2 which address CVE-2014-4611. Contributed by Brahma Reddy Battula. mailing-list
- [hadoop-common-issues] 20210920 [jira] [Commented] (HADOOP-17917) Backport HADOOP-15993 to branch-3.2 which Address CVE-2014-4611 mailing-list
- [hadoop-common-issues] 20210921 [jira] [Commented] (HADOOP-17917) Backport HADOOP-15993 to branch-3.2 which Address CVE-2014-4611 mailing-list
- [hadoop-common-issues] 20210916 [jira] [Created] (HADOOP-17917) Backport HADOOP-15993 to branch-3.2 which Address CVE-2014-4611 mailing-list
- [hadoop-common-issues] 20210916 [jira] [Updated] (HADOOP-17917) Backport HADOOP-15993 to branch-3.2 which Address CVE-2014-4611 mailing-list
- [hadoop-common-issues] 20210924 [jira] [Commented] (HADOOP-17917) Backport HADOOP-15993 to branch-3.2 which address CVE-2014-4611 mailing-list
- www.securitymouse.com broken-link
- www.securitymouse.com broken-link