p PatchFirst

CVE-2014-4607

CVE-2014-4607

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to execute arbitrary code via a crafted Literal Run.

CVSS 8.8 · High · EPSS 5.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • busybox Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:1.22.0-10

    Update to 1:1.22.0-10

  • busybox Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:1.22.0-10

    Update to 1:1.22.0-10

  • busybox Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:1.22.0-10

    Update to 1:1.22.0-10

  • lzo2 Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.08-1

    Update to 2.08-1

  • lzo2 Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.08-1

    Update to 2.08-1

  • lzo2 Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.08-1

    Update to 2.08-1

  • krfb Ubuntu:14.04:LTS

    Versions
    • 4:4.11.2-0ubuntu1
    • 4:4.11.80-0ubuntu1
    • 4:4.11.95-0ubuntu1
    • 4:4.11.97-0ubuntu1
    • 4:4.12.0-0ubuntu1
    • 4:4.12.1-0ubuntu1
    • 4:4.12.2-0ubuntu1
    • 4:4.12.3-0ubuntu1
    • 4:4.12.90-0ubuntu1
    • 4:4.12.95-0ubuntu1
    • 4:4.12.97-0ubuntu1
    • 4:4.13.0-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 4:4.13.0-0ubuntu1.1

    Update to 4:4.13.0-0ubuntu1.1

  • lzo2 Ubuntu:14.04:LTS

    Versions
    • 2.06-1.2
    • 2.06-1.2ubuntu1
    Affected ranges
    • ECOSYSTEM: < 2.06-1.2ubuntu1.1

    Update to 2.06-1.2ubuntu1.1

  • grub2 Ubuntu:20.04:LTS

    Versions
    • 2.04-1ubuntu12
    • 2.04-1ubuntu13
    • 2.04-1ubuntu14
    • 2.04-1ubuntu16
    • 2.04-1ubuntu18
    • 2.04-1ubuntu20
    • 2.04-1ubuntu21
    • 2.04-1ubuntu22
    • 2.04-1ubuntu23
    • 2.04-1ubuntu24
    • 2.04-1ubuntu25
    • 2.04-1ubuntu26
    • 2.04-1ubuntu26.1
    • 2.04-1ubuntu26.2
    • 2.04-1ubuntu26.3
    • 2.04-1ubuntu26.4
    • 2.04-1ubuntu26.6
    • 2.04-1ubuntu26.7
    Affected ranges
    • ECOSYSTEM: < 2.04-1ubuntu26.8

    Update to 2.04-1ubuntu26.8

  • grub2-signed Ubuntu:20.04:LTS

    Versions
    • 1.128
    • 1.129
    • 1.130
    • 1.131
    • 1.133
    • 1.134
    • 1.135
    • 1.136
    • 1.137
    • 1.138
    • 1.139
    • 1.140
    • 1.141
    • 1.142
    • 1.142.1
    • 1.142.3
    • 1.142.4
    • 1.142.5
    • 1.142.6
    • 1.142.8
    • 1.142.9
    Affected ranges
    • ECOSYSTEM: < 1.142.10

    Update to 1.142.10

  • grub2-unsigned Ubuntu:20.04:LTS

    Versions
    • 2.04-1ubuntu44
    • 2.04-1ubuntu44.2
    Affected ranges
    • ECOSYSTEM: < 2.04-1ubuntu47.4

    Update to 2.04-1ubuntu47.4

Original sources

Check your server →