CVE-2014-4656

🗓️ 03 Jul 2014 00:00:00Reported by ubuntu.comType

Multiple integer overflows in ALSA control implementation in Linux kernel pre-3.15.2 allow local denial of service with /dev/snd/controlCX access

Reporter	Title	Published	Views	Family All 338
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	10.04	any	linux	2.6.32-65.131	linux_2.6.32-65.131_any.deb
Ubuntu	12.04	any	linux	3.2.0-68.102	linux_3.2.0-68.102_any.deb
Ubuntu	14.04	any	linux	3.13.0-35.62	linux_3.13.0-35.62_any.deb
Ubuntu	12.04	any	linux-armadaxp	3.2.0-1637.54	linux-armadaxp_3.2.0-1637.54_any.deb
Ubuntu	10.04	any	linux-ec2	2.6.32-369.85	linux-ec2_2.6.32-369.85_any.deb
Ubuntu	12.04	any	linux-lts-trusty	3.13.0-35.62~precise1	linux-lts-trusty_3.13.0-35.62~precise1_any.deb
Ubuntu	12.04	any	linux-ti-omap4	3.2.0-1452.72	linux-ti-omap4_3.2.0-1452.72_any.deb

Source	Link
github	www.github.com/torvalds/linux/commit/ac902c112d90a89e59916f751c2745f4dbdbb4bd
github	www.github.com/torvalds/linux/commit/883a1d49f0d77d30012f114b2e19fc141beb3e8e
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
openwall	www.openwall.com/lists/oss-security/2014/06/26/6
kernel	www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2
git	www.git.kernel.org/
git	www.git.kernel.org/
ubuntu	www.ubuntu.com/security/notices/USN-2332-1
ubuntu	www.ubuntu.com/security/notices/USN-2333-1
ubuntu	www.ubuntu.com/security/notices/USN-2334-1

25 Sep 2025 12:20Current

6.8Medium risk

Vulners AI Score6.8

CVSS 24.6

EPSS0.00075