p PatchFirst

CVE-2014-4611

CVE-2014-4611

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4_uncompress function in lib/lz4/lz4_decompress.c in the Linux kernel before 3.15.2, on 32-bit platforms might allow context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted Literal Run that would be improperly handled by programs not complying with an API limitation, a different vulnerability than CVE-2014-4715.

EPSS 8.9% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • linux Debian:12

    Affected ranges
    • ECOSYSTEM: < 3.14.9-1

    Update to 3.14.9-1

  • linux Debian:13

    Affected ranges
    • ECOSYSTEM: < 3.14.9-1

    Update to 3.14.9-1

  • linux Debian:14

    Affected ranges
    • ECOSYSTEM: < 3.14.9-1

    Update to 3.14.9-1

  • lz4 Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.0~r119-1

    Update to 0.0~r119-1

  • lz4 Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.0~r119-1

    Update to 0.0~r119-1

  • lz4 Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.0~r119-1

    Update to 0.0~r119-1

  • linux Ubuntu:14.04:LTS

    Versions
    • 3.11.0-12.19
    • 3.12.0-1.3
    • 3.12.0-2.5
    • 3.12.0-2.7
    • 3.12.0-3.8
    • 3.12.0-3.9
    • 3.12.0-4.10
    • 3.12.0-4.12
    • 3.12.0-5.13
    • 3.12.0-7.15
    • 3.13.0-1.16
    • 3.13.0-2.17
    • 3.13.0-3.18
    • 3.13.0-4.19
    • 3.13.0-5.20
    • 3.13.0-6.23
    • 3.13.0-7.25
    • 3.13.0-7.26
    • 3.13.0-8.27
    • 3.13.0-8.28
    • 3.13.0-10.30
    • 3.13.0-11.31
    • 3.13.0-12.32
    • 3.13.0-13.33
    • 3.13.0-14.34
    • 3.13.0-15.35
    • 3.13.0-16.36
    • 3.13.0-17.37
    • 3.13.0-18.38
    • 3.13.0-19.39
    • 3.13.0-19.40
    • 3.13.0-20.42
    • 3.13.0-21.43
    • 3.13.0-22.44
    • 3.13.0-23.45
    • 3.13.0-24.46
    • 3.13.0-24.47
    • 3.13.0-27.50
    • 3.13.0-29.53
    • 3.13.0-30.54
    • 3.13.0-30.55
    Affected ranges
    • ECOSYSTEM: < 3.13.0-32.57

    Update to 3.13.0-32.57

  • lz4 Ubuntu:Pro:14.04:LTS

    Versions
    • 0.0~r94-2
    • 0.0~r99-1
    • 0.0~r107-1
    • 0.0~r109-1
    • 0.0~r114-2ubuntu1
    Affected ranges
    • ECOSYSTEM: < 0.0~r114-2ubuntu1+esm1

    Update to 0.0~r114-2ubuntu1+esm1

Original sources

Check your server →