UBUNTU-CVE-2014-4608

Advisory lineage Upstream: 1 Downstream: 1
Upstream
CVE-2014-4608
Downstream
USN-2420-1
Published: 03 Jul 2014, 00:00
Last modified:22 Apr 2026, 09:45

Vulnerability Summary

Overall Risk (default)
medium
29/100
CVSS Score
7.3 HIGH
3.1 (osv_ubuntu)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

03 Jul 2014, 00:00
Published
Vulnerability first disclosed
22 Apr 2026, 09:45
Last Modified
Vulnerability information updated

Description

Multiple integer overflows in the lzo1x_decompress_safe function in lib/lzo/lzo1x_decompress_safe.c in the LZO decompressor in the Linux kernel before 3.15.2 allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Literal Run. NOTE: the author of the LZO algorithms says "the Linux kernel is *not* affected; media hype.

CVSS Metrics

  • v3.1•HIGH•Score: 7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected Systems

  • ubuntu•linux

    < 3.13.0-40.69

References (21)