{"id":"CVE-2014-4611","aliases":["BELL-CVE-2014-4611","DEBIAN-CVE-2014-4611","EUVD-2014-4538","GHSA-c7c4-fwj7-36pr","MGASA-2014-0321","UBUNTU-CVE-2014-4611","USN-2290-1","openSUSE-SU-2024:10425-1"],"status":"published","title":"Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and...","description":"Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4_uncompress function in lib/lz4/lz4_decompress.c in the Linux kernel before 3.15.2, on 32-bit platforms might allow context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted Literal Run that would be improperly handled by programs not complying with an API limitation, a different vulnerability than CVE-2014-4715.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.0887,"percentile":0.95244,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2014-07-03T00:00:00Z","modified":"2026-10-23T15:47:28Z","fixes":[{"ecosystem":"Debian:12","package":"linux","fixed_in":["3.14.9-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"linux","fixed_in":["3.14.9-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"linux","fixed_in":["3.14.9-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"lz4","fixed_in":["0.0~r119-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"lz4","fixed_in":["0.0~r119-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"lz4","fixed_in":["0.0~r119-1"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"eet","fixed_in":["1.7.5-2.1.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"eet","fixed_in":["1.7.10-1.1.mga4"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"linux","fixed_in":["3.13.0-32.57"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"lz4","fixed_in":["0.0~r114-2ubuntu1+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.9-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.9-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.9-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"lz4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0~r119-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"lz4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0~r119-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"lz4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0~r119-1"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"eet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-2.1.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"eet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.10-1.1.mga4"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-32.57"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"lz4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0~r114-2ubuntu1+esm1"}]}],"versions":["0.0~r94-2","0.0~r99-1","0.0~r107-1","0.0~r109-1","0.0~r114-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-32.57"}]}],"versions":["3.11.0-12.19","3.12.0-1.3","3.12.0-2.5","3.12.0-2.7","3.12.0-3.8","3.12.0-3.9","3.12.0-4.10","3.12.0-4.12","3.12.0-5.13","3.12.0-7.15","3.13.0-1.16","3.13.0-2.17","3.13.0-3.18","3.13.0-4.19","3.13.0-5.20","3.13.0-6.23","3.13.0-7.25","3.13.0-7.26","3.13.0-8.27","3.13.0-8.28","3.13.0-10.30","3.13.0-11.31","3.13.0-12.32","3.13.0-13.33","3.13.0-14.34","3.13.0-15.35","3.13.0-16.36","3.13.0-17.37","3.13.0-18.38","3.13.0-19.39","3.13.0-19.40","3.13.0-20.42","3.13.0-21.43","3.13.0-22.44","3.13.0-23.45","3.13.0-24.46","3.13.0-24.47","3.13.0-27.50","3.13.0-29.53","3.13.0-30.54","3.13.0-30.55"],"bundled":7}],"products":[{"vendor":"linux","product":"linux_kernel"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2014/06/26/24","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"https://www.securitymouse.com/lms-2014-06-16-6","tags":["x_refsource_MISC","x_transferred","Broken Link","web"]},{"url":"https://code.google.com/p/lz4/source/detail?r=118","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2014-07/msg00025.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory","article","web"]},{"url":"http://twitter.com/djrbliss/statuses/485042901399789568","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"http://secunia.com/advisories/60238","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://twitter.com/djrbliss/statuses/484931749013495809","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securitytracker.com/id/1030491","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://secunia.com/advisories/59770","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://fastcompression.blogspot.fr/2014/06/debunking-lz4-20-years-old-bug-myth.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"http://secunia.com/advisories/59567","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory","advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=206204a1162b995e2185275167b22468c00d6b36","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://github.com/torvalds/linux/commit/206204a1162b995e2185275167b22468c00d6b36","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://blog.securitymouse.com/2014/06/raising-lazarus-20-year-old-bug-that.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.15.2","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1112436","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","advisory","report"]},{"url":"https://www.securitymouse.com/lms-2014-06-16-5","tags":["x_refsource_MISC","x_transferred","Broken Link","web"]},{"url":"https://code.google.com/p/lz4/issues/detail?id=52","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.apache.org/thread.html/rb301598bf24ecb6f4ce405c2a2ae23905fc4dce64277c020fc3883e5%40%3Ccommon-issues.hadoop.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r0038b5836e3bc91af3ff93721c0fc55d6543afab8cec47df7361fa0e%40%3Ccommon-dev.hadoop.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/ra72a62803eeabb6a8dc65032ca81b13ab75c271e4dff2df27c2915bb%40%3Ccommon-issues.hadoop.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r62f398f40f522cf59cfd89428835d4ca633a9764d82e4b7a12c37add%40%3Ccommon-issues.hadoop.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r6c998e1a47c1c3fba61a80d0dcc4b39c7fc452400c7051f685b76c0b%40%3Ccommon-issues.hadoop.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r35b9f26c8ad91094d37bea0256012aeb065e32ff73dda5f934fefeb3%40%3Ccommon-issues.hadoop.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r8e0111cd64a455b0a33ab12a50fba724a0218f283c759f16da8864c2%40%3Ccommon-issues.hadoop.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r31eb601a8415525fa4a77b2f624c09be3550599898468ab96d508f90%40%3Ccommon-issues.hadoop.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r6794c8ff8f339d95a80415b0afbe71d5eda1b97bdaca19bec78d0f8f%40%3Ccommon-commits.hadoop.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r5c9b4826bbd8933e4688db62f6ed9008cabb8f26bcea84d4e309caf7%40%3Ccommon-issues.hadoop.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r229456b1fa718e329232bd7ceca4bd3e81ac55f2ec4db7314f1d7fcb%40%3Ccommon-commits.hadoop.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/rf4cb13d6ee891dfe2307389c8c6594a0cb10d9efb72be8bd2f97cb76%40%3Ccommon-issues.hadoop.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r0addc410fdd680330054deb526323edb29e869e8d1097593f538e208%40%3Ccommon-issues.hadoop.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4611"},{"url":"https://lists.apache.org/thread.html/r0038b5836e3bc91af3ff93721c0fc55d6543afab8cec47df7361fa0e@%3Ccommon-dev.hadoop.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r0addc410fdd680330054deb526323edb29e869e8d1097593f538e208@%3Ccommon-issues.hadoop.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r229456b1fa718e329232bd7ceca4bd3e81ac55f2ec4db7314f1d7fcb@%3Ccommon-commits.hadoop.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r31eb601a8415525fa4a77b2f624c09be3550599898468ab96d508f90@%3Ccommon-issues.hadoop.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r35b9f26c8ad91094d37bea0256012aeb065e32ff73dda5f934fefeb3@%3Ccommon-issues.hadoop.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r5c9b4826bbd8933e4688db62f6ed9008cabb8f26bcea84d4e309caf7@%3Ccommon-issues.hadoop.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r62f398f40f522cf59cfd89428835d4ca633a9764d82e4b7a12c37add@%3Ccommon-issues.hadoop.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r6794c8ff8f339d95a80415b0afbe71d5eda1b97bdaca19bec78d0f8f@%3Ccommon-commits.hadoop.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r6c998e1a47c1c3fba61a80d0dcc4b39c7fc452400c7051f685b76c0b@%3Ccommon-issues.hadoop.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r8e0111cd64a455b0a33ab12a50fba724a0218f283c759f16da8864c2@%3Ccommon-issues.hadoop.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/ra72a62803eeabb6a8dc65032ca81b13ab75c271e4dff2df27c2915bb@%3Ccommon-issues.hadoop.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rb301598bf24ecb6f4ce405c2a2ae23905fc4dce64277c020fc3883e5@%3Ccommon-issues.hadoop.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rf4cb13d6ee891dfe2307389c8c6594a0cb10d9efb72be8bd2f97cb76@%3Ccommon-issues.hadoop.apache.org%3E"},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=206204a1162b995e2185275167b22468c00d6b36"},{"url":"https://github.com/advisories/GHSA-c7c4-fwj7-36pr"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2014-4611","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-4611","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0321.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13786","tags":["report"]},{"url":"http://openwall.com/lists/oss-security/2014/06/26/25","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2014-4611","tags":["report"]},{"url":"https://blog.securitymouse.com/2014/06/raising-lazarus-20-year-old-bug-that.html","tags":["report"]},{"url":"https://fastcompression.blogspot.ca/2014/06/debunking-lz4-20-years-old-bug-myth.html","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2287-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2288-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2289-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-2290-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-4611","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-1739","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-3144","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-3145","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-3940","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-4943","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-7284","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4611","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9762","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2014-4611","description":"Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4_uncompress function in lib/lz4/lz4_decompress.c in the Linux kernel before 3.15.2, on 32-bit platforms might allow context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted Literal Run that would be improperly handled by programs not complying with an API limitation, a different vulnerability than CVE-2014-4715.","status":"published","published":"2014-07-03T01:00:00Z","modified":"2024-08-06T11:20:26.969Z","updated_at":"2026-11-02T14:33:45.604635Z"}],"euvd":[{"id":"EUVD-2014-4538","description":"Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4_uncompress function in lib/lz4/lz4_decompress.c in the Linux kernel before 3.15.2, on 32-bit platforms might allow context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted Literal Run that would be improperly handled by programs not complying with an API limitation, a different vulnerability than CVE-2014-4715.","status":"published","published":"2014-07-03T01:00:00Z","modified":"2024-08-06T11:20:26Z","updated_at":"2026-11-03T01:57:05.7284Z"}],"ghsa":[{"id":"GHSA-c7c4-fwj7-36pr","title":"Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and...","description":"Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4_uncompress function in lib/lz4/lz4_decompress.c in the Linux kernel before 3.15.2, on 32-bit platforms might allow context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted Literal Run that would be improperly handled by programs not complying with an API limitation, a different vulnerability than CVE-2014-4715.","status":"published","published":"2022-05-13T01:05:42Z","modified":"2025-04-12T12:36:30Z","cwes":["CWE-20"],"updated_at":"2026-11-02T15:01:18.41255Z"}],"nvd":[{"id":"CVE-2014-4611","description":"Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4_uncompress function in lib/lz4/lz4_decompress.c in the Linux kernel before 3.15.2, on 32-bit platforms might allow context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted Literal Run that would be improperly handled by programs not complying with an API limitation, a different vulnerability than CVE-2014-4715.","status":"published","published":"2014-07-03T04:22:15.623Z","modified":"2026-06-17T00:10:20.03Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:54.827864Z"}],"osv":[{"id":"BELL-CVE-2014-4611","title":"CVE-2014-4611 does not affect BellSoft software","status":"withdrawn","published":"2014-07-03T04:22:00Z","modified":"2026-01-28T07:21:22.591347Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"CVE-2014-4611","description":"Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4_uncompress function in lib/lz4/lz4_decompress.c in the Linux kernel before 3.15.2, on 32-bit platforms might allow context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted Literal Run that would be improperly handled by programs not complying with an API limitation, a different vulnerability than CVE-2014-4715.","status":"published","published":"2014-07-03T04:22:15Z","modified":"2026-04-16T06:22:06.481929969Z","updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-4611","description":"Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4_uncompress function in lib/lz4/lz4_decompress.c in the Linux kernel before 3.15.2, on 32-bit platforms might allow context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted Literal Run that would be improperly handled by programs not complying with an API limitation, a different vulnerability than CVE-2014-4715.","status":"published","published":"2014-07-03T04:22:15.623Z","modified":"2026-10-23T15:47:28.083510524Z","updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"MGASA-2014-0321","title":"Updated eet packages fix security vulnerability","description":"Integer overflow in the LZ4 algorithm implementation on 32-bit platforms might\nallow context-dependent attackers to cause a denial of service (memory\ncorruption) or possibly have unspecified other impact via a crafted Literal\nRun that would be improperly handled by programs not complying with an API\nlimitation (CVE-2014-4611).\n\nThe eet package bundles the LZ4 implementation and has been patched to correct\nthis flaw.\n","status":"published","published":"2014-08-06T10:31:11Z","modified":"2026-04-16T06:24:19.353422348Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2024:10425-1","title":"edje-1.18.2-5.1 on GA media","description":"These are all security issues fixed in the edje-1.18.2-5.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:46:25.382646Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"UBUNTU-CVE-2014-4611","description":"Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4_uncompress function in lib/lz4/lz4_decompress.c in the Linux kernel before 3.15.2, on 32-bit platforms might allow context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted Literal Run that would be improperly handled by programs not complying with an API limitation, a different vulnerability than CVE-2014-4715.","status":"published","published":"2014-07-03T00:00:00Z","modified":"2026-04-22T09:45:20.223772Z","updated_at":"2026-11-02T15:54:09.010095Z"},{"id":"USN-2290-1","title":"linux vulnerabilities","description":"\nSasha Levin reported a flaw in the Linux kernel's point-to-point protocol\n(PPP) when used with the Layer Two Tunneling Protocol (L2TP). A local user\ncould exploit this flaw to gain administrative privileges. (CVE-2014-4943)\n\nSalva Peiró discovered an information leak in the Linux kernel's media-\ndevice driver. A local attacker could exploit this flaw to obtain sensitive\ninformation from kernel memory. (CVE-2014-1739)\n\nA bounds check error was discovered in the socket filter subsystem of the\nLinux kernel. A local user could exploit this flaw to cause a denial of\nservice (system crash) via crafted BPF instructions. (CVE-2014-3144)\n\nA remainder calculation error was discovered in the socket filter subsystem\nof the Linux kernel. A local user could exploit this flaw to cause a denial\nof service (system crash) via crafted BPF instructions. (CVE-2014-3145)\n\nA flaw was discovered in the Linux kernel's handling of hugetlb entries. A\nlocal user could exploit this flaw to cause a denial service (memory\ncorruption or system crash). (CVE-2014-3940)\n\nDon Bailey and Ludvig Strigeus discovered an integer overflow in the Linux\nkernel's implementation of the LZ4 decompression algorithm, when used by\ncode not complying with API limitations. An attacker could exploit this\nflaw to cause a denial of service (memory corruption) or possibly other\nunspecified impact. (CVE-2014-4611)\n\nTuomas Räsänen reported the Linux kernel on certain Intel processors does\nnot properly initialize random seeds for network operations, causing TCP\nsequence numbers, TCP and UDP port numbers and IP ID values to be\npredictable. A remote attacker could exploit this flaw to spoof or disrupt\nIP communication. (CVE-2014-7284)\n","status":"published","published":"2014-07-17T01:33:01Z","modified":"2026-04-22T08:57:54.380862Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}