20-Year Old Vulnerability in LZO Compression Algorithm Went to Planet Mars

🗓️ 27 Jun 2014 05:43:00Reported by Mohit KumarType

A 20-year-old critical vulnerability in LZO compression algorithm discovered, affecting Linux kernel, Samsung Android devices, and NASA's Rover on Mars. Vulnerability allows for buffer overflows and remote code execution

Reporter	Title	Published	Views	Family All 427
IBM Security Bulletins	Security Bulletin: WebSphere Cast Iron and App Connect Professional are affected by vulnerabilities in busybox, arpwatch, apr, acpid, augeas, firefox, ctdb.	15 Dec 202107:41	–	ibm
IBM Security Bulletins	IBM Security Network Protection / IBM QRadar Network Security / XGS Technote Index	31 Jan 202100:10	–	ibm
IBM Security Bulletins	Security Bulletin: A busybox vulnerability affects IBM DataPower Gateways (CVE-2014-4607)	15 Jun 201807:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in busybox affect IBM Security Network Protection (CVE-2014-4607, and CVE-2014-9645 )	16 Jun 201821:46	–	ibm
FreeBSD	mencoder -- potential buffer overrun when processing malicious lzo compressed input	24 Jun 201400:00	–	freebsd
FreeBSD	ffmpeg -- multiple vulnerabilities	12 Mar 201500:00	–	freebsd
FreeBSD	mplayer -- potential buffer overrun when processing malicious lzo compressed input	24 Jun 201400:00	–	freebsd
FreeBSD	krfb -- Possible Denial of Service or code execution via integer overflow	3 Aug 201400:00	–	freebsd
FreeBSD	LZO -- potential buffer overrun when processing malicious input data	25 Jun 201400:00	–	freebsd
ATTACKERKB	The LZO/LZ4 Integer Overflow Summary	3 Jul 201400:00	–	attackerkb