CVE-2014-4608

2014-07-0300:00:00

ubuntu.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

84.4%

JSON

DISPUTED Multiple integer overflows in the lzo1x_decompress_safe
function in lib/lzo/lzo1x_decompress_safe.c in the LZO decompressor in the
Linux kernel before 3.15.2 allow context-dependent attackers to cause a
denial of service (memory corruption) via a crafted Literal Run. NOTE: the
author of the LZO algorithms says “the Linux kernel is not affected;
media hype.”

Bugs

<https://launchpad.net/bugs/1335313>

Notes

Author	Note
jdstrand	android kernels (goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 13.10 preview kernels android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.04 preview kernels
jj	206a81c18401c0cde6e579164f752c4b147324ce original commit was incomplete reverted by af958a38a60c7ca3d8a39c918c1baa2ff7b6b233 and replaced by 72cf90124e87d975d0b2114d930808c58b4c05e4, cause of -2 USN update

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchlinux< 2.6.32-68.135UNKNOWN
ubuntu12.04noarchlinux< 3.2.0-72.107UNKNOWN
ubuntu13.10noarchlinux< 3.11.0-26.45UNKNOWN
ubuntu14.04noarchlinux< 3.13.0-40.69UNKNOWN
ubuntu14.10noarchlinux< 3.16.0-25.33UNKNOWN
ubuntu12.04noarchlinux-armadaxp< 3.2.0-1641.59UNKNOWN
ubuntu10.04noarchlinux-ec2< 2.6.32-372.89UNKNOWN
ubuntu12.04noarchlinux-lts-raring< 3.8.0-44.66~precise1UNKNOWN
ubuntu12.04noarchlinux-lts-trusty< 3.13.0-40.69~precise1UNKNOWN
ubuntu12.04noarchlinux-ti-omap4< 3.2.0-1456.76UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	linux	< 2.6.32-68.135	UNKNOWN
ubuntu	12.04	noarch	linux	< 3.2.0-72.107	UNKNOWN
ubuntu	13.10	noarch	linux	< 3.11.0-26.45	UNKNOWN
ubuntu	14.04	noarch	linux	< 3.13.0-40.69	UNKNOWN
ubuntu	14.10	noarch	linux	< 3.16.0-25.33	UNKNOWN
ubuntu	12.04	noarch	linux-armadaxp	< 3.2.0-1641.59	UNKNOWN
ubuntu	10.04	noarch	linux-ec2	< 2.6.32-372.89	UNKNOWN
ubuntu	12.04	noarch	linux-lts-raring	< 3.8.0-44.66~precise1	UNKNOWN
ubuntu	12.04	noarch	linux-lts-trusty	< 3.13.0-40.69~precise1	UNKNOWN
ubuntu	12.04	noarch	linux-ti-omap4	< 3.2.0-1456.76	UNKNOWN