CVE-2014-4607

Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to execute arbitrary code via a crafted Literal Run.

Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to execute arbitrary code via a crafted Literal Run.

• CVE-2014-4607: minilzo: Update to minilzo-2.08 to fix integer overflow

Updated liblzo packages fix security vulnerability:

An integer overflow in liblzo before 2.07 allows attackers to cause a denial of service or possibly code execution in applications performing LZO decompression on a compressed payload from the attacker (CVE-2014-4607).

Updated busybox packages fix security vulnerability:

An integer overflow in liblzo before 2.07 allows attackers to cause a denial of service or possibly code execution in applications using performing LZO decompression on a compressed payload from the attacker (CVE-2014-4607).

Busybox bundles part of the liblzo code, containing the lzo1x_decompress_safe function, which is affected by this issue.

The bundled version of minilzo.c in the mednafen package has been updated to version 2.08 to fix the following security vulnerability:

An integer overflow in minilzo before 2.07 allows attackers to cause a denial of service or possibly code execution in applications using performing LZO decompression on a compressed payload from the attacker (CVE-2014-4607).

An integer overflow in liblzo before 2.07 allows attackers to cause a denial of service or possibly code execution in applications using performing LZO decompression on a compressed payload from the attacker (CVE-2014-4607).

The harbour is built with a bundled copy of minilzo, which is a part of liblzo containing the vulnerable code. This update is patched to update the bundled minilzo to version 2.8.

An integer overflow in liblzo before 2.07 allows attackers to cause a denial of service or possibly code execution in applications using performing LZO decompression on a compressed payload from the attacker (CVE-2014-4607).

The libvncserver library is built with a bundled copy of minilzo, which is a part of liblzo containing the vulnerable code. The remmina package is built with a bundled copy of libvncserver.

An integer overflow in liblzo before 2.07 allows attackers to cause a denial of service or possibly code execution in applications using performing LZO decompression on a compressed payload from the attacker (CVE-2014-4607).

The icecream package is built with a bundled copy of minilzo, which is a part of liblzo containing the vulnerable code.

An integer overflow in liblzo before 2.07 allows attackers to cause a denial of service or possibly code execution in applications using performing LZO decompression on a compressed payload from the attacker (CVE-2014-4607).

The grub2 package is built with a bundled copy of minilzo, which is a part of liblzo containing the vulnerable code.

An integer overflow in liblzo before 2.07 allows attackers to cause a denial of service or possibly code execution in applications using performing LZO decompression on a compressed payload from the attacker (CVE-2014-4607).

The italc package is built with a bundled copy of minilzo, which is a part of liblzo containing the vulnerable code.

An integer overflow in liblzo before 2.07 allows attackers to cause a denial of service or possibly code execution in applications using performing LZO decompression on a compressed payload from the attacker (CVE-2014-4607).

The libvncserver library is built with a bundled copy of minilzo, which is a part of liblzo containing the vulnerable code. The krfb package is built with a bundled copy of libvncserver.

An integer overflow in liblzo before 2.07 allows attackers to cause a denial of service or possibly code execution in applications using performing LZO decompression on a compressed payload from the attacker (CVE-2014-4607).

The libvncserver library is built with a bundled copy of minilzo, which is a part of liblzo containing the vulnerable code. The remmina package is built with a bundled copy of libvncserver.

The updated packages should have been shipped along with MGASA-2014-0356

Updated distcc packages fix security vulnerability:

An integer overflow in liblzo before 2.07 allows attackers to cause a denial of service or possibly code execution in applications using performing LZO decompression on a compressed payload from the attacker (CVE-2014-4607).

The distcc package is built with a bundled copy of minilzo, which is a part of liblzo containing the vulnerable code.

Updated blender package fixes security vulnerability:

An integer overflow in liblzo before 2.07 allows attackers to cause a denial of service or possibly code execution in applications using performing LZO decompression on a compressed payload from the attacker (CVE-2014-4607).

The blender package is built with a bundled copy of minilzo, which is a part of liblzo containing the vulnerable code.

Updated dump packages fix security vulnerability:

An integer overflow in liblzo before 2.07 allows attackers to cause a denial of service or possibly code execution in applications using performing LZO decompression on a compressed payload from the attacker (CVE-2014-4607).

The dump package is built with a bundled copy of minilzo, which is a part of liblzo containing the vulnerable code.

This KDE 4 update provides an upgrade to the last stable version of KDE Applications and Development Platform for the 4.12 series, and updates Plasma Workspaces to 4.11.12.

This update fixes several security vulnerabilities

• KMail/KIO POP3 SSL MITM Flaw (CVE-2014-3494 - mga#13545)
• KAuth PID Reuse Flaw (CVE-2014-5033 - mga#13792)
• krfb: possible denial of service or code execution via integer overflow (CVE-2014-4607 - mga#13933)
• krfb: multiple security issues in libvncserver (mga#14205) (CVE-2014-6053, CVE-2014-6054, CVE-2014-6055)

and additional issues

• poxml is compiled without antlr (mga#12612)
• crashes in bluedevil (mga#12751, mga#13618, mga#13728)
• kdelibs file dialog isn't properly translated in pure Qt apps (mga#12982)
• kate: self-closing xml tag breaks indentation (mga#13275, bko#330174)
• krdc missing dependency on freerdp (mga#13292)
• lock screen: can't start a new session after playing around with buttons (mga#13300, bko#331761)
• kbreakout missing dependency on libkdegames-corebindings (mga#13531)
• meinproc4 doesn't substitute entity with fixed libxml2 (mga#13555, mga#13559, bko#335001)
• calligra-words missing dependency on soprano-plugin-redland (mga#12008)
• digikam can't export to flickr (mga#13778, bko#336835)

See the referenced buglists in KDE announcements for the complete list of fixes.

These are all security issues fixed in the LibVNCServer-devel-0.9.10-3.5 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the icecream-1.3.1-3.7 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the nfdump-1.6.23-1.3 package on the GA media of openSUSE Tumbleweed.

Don A. Bailey discovered that LZO incorrectly handled certain input data. An attacker could use this issue to cause LZO to crash, resulting in a denial of service, or possibly execute arbitrary code.