CVE-2014-4656

🗓️ 03 Jul 2014 01:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 151 Views🌐 WEB

The Linux kernel before 3.15.2 allows local users to cause denial of service via ALSA control implementation

Reporter	Title	Published	Views	Family All 338
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

NVD

Node

linux linux_kernelRange<3.15.2

Node

suse linux_enterprise_serverMatch10sp4ltss

Node

canonical ubuntu_linuxMatch12.04esm

Node

redhat enterprise_linux_desktopMatch6.0

redhat enterprise_linux_eusMatch6.6

redhat enterprise_linux_serverMatch6.0

redhat enterprise_linux_server_ausMatch6.6

redhat enterprise_linux_server_tusMatch6.6

redhat enterprise_linux_workstationMatch6.0

Source	Link
rhn	www.rhn.redhat.com/errata/RHSA-2014-1083.html
securitytracker	www.securitytracker.com/id/1038201
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
secunia	www.secunia.com/advisories/60564
git	www.git.kernel.org/
rhn	www.rhn.redhat.com/errata/RHSA-2015-0087.html
ubuntu	www.ubuntu.com/usn/USN-2335-1
ubuntu	www.ubuntu.com/usn/USN-2334-1
source	www.source.android.com/security/bulletin/2017-04-01
github	www.github.com/torvalds/linux/commit/883a1d49f0d77d30012f114b2e19fc141beb3e8e

Parameter	Position	Path	Description	CWE
index values in snd_ctl_add	path	/dev/snd/controlCX	Multiple integer overflows in ALSA sound/control.c allow local users to cause a denial of service via /dev/snd/controlCX.	CWE-190
numid values in snd_ctl_remove_numid_conflict	path	/dev/snd/controlCX	Multiple integer overflows in ALSA sound/control.c allow local users to cause a denial of service via /dev/snd/controlCX.	CWE-190

17 Jun 2026 00:10Current

5.6Medium risk

Vulners AI Score5.6

CVSS 24.6

EPSS0.005

CWE-190