Home

CVE-2014-4607

Description

Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to execute arbitrary code via a crafted Literal Run.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
10.271

Associated Vulnerability

VulnerabilityOS Platform
data compression library (USN-2300-1) liblzo2-2_2.06-1ubuntu0.1_i386.debLinux
data compression library (USN-2300-1) liblzo2-2_2.06-1ubuntu0.1_amd64.debLinux
data compression library (USN-2300-1) liblzo2-2_2.06-1.2ubuntu1.1_i386.debLinux
data compression library (USN-2300-1) liblzo2-2_2.06-1.2ubuntu1.1_amd64.debLinux
Lzo update (CESA-2014:0861) lzo-devel-2.03-3.1.el6_5.1.i686.rpmLinux
Lzo update (CESA-2014:0861) lzo-devel-2.03-3.1.el6_5.1.x86_64.rpmLinux
Lzo update (CESA-2014:0861) lzo-minilzo-2.03-3.1.el6_5.1.i686.rpmLinux
Lzo update (CESA-2014:0861) lzo-minilzo-2.03-3.1.el6_5.1.x86_64.rpmLinux
(RHSA-2014:0861) Moderate: lzo security update lzo-2.03-3.1.el6_5.1.i686.rpmLinux
(RHSA-2014:0861) Moderate: lzo security update lzo-2.03-3.1.el6_5.1.x86_64.rpmLinux
(RHSA-2014:0861) Moderate: lzo security update lzo-2.06-6.el7_0.2.i686.rpmLinux
(RHSA-2014:0861) Moderate: lzo security update lzo-2.06-6.el7_0.2.x86_64.rpmLinux
(RHSA-2014:0861) Moderate: lzo security update lzo-devel-2.03-3.1.el6_5.1.i686.rpmLinux
(RHSA-2014:0861) Moderate: lzo security update lzo-devel-2.03-3.1.el6_5.1.x86_64.rpmLinux
(RHSA-2014:0861) Moderate: lzo security update lzo-devel-2.06-6.el7_0.2.i686.rpmLinux
(RHSA-2014:0861) Moderate: lzo security update lzo-devel-2.06-6.el7_0.2.x86_64.rpmLinux
(RHSA-2014:0861) Moderate: lzo security update lzo-minilzo-2.03-3.1.el6_5.1.i686.rpmLinux
(RHSA-2014:0861) Moderate: lzo security update lzo-minilzo-2.03-3.1.el6_5.1.x86_64.rpmLinux
(RHSA-2014:0861) Moderate: lzo security update lzo-minilzo-2.06-6.el7_0.2.i686.rpmLinux
(RHSA-2014:0861) Moderate: lzo security update lzo-minilzo-2.06-6.el7_0.2.x86_64.rpmLinux
Lzo update (ELSA-2014-0861) lzo-2.03-3.1.el6_5.1.x86_64.rpmLinux
Lzo-devel update (ELSA-2014-0861) lzo-devel-2.03-3.1.el6_5.1.x86_64.rpmLinux
Lzo-minilzo update (ELSA-2014-0861) lzo-minilzo-2.03-3.1.el6_5.1.x86_64.rpmLinux
Lzo update (ELSA-2014-0861) lzo-2.03-3.1.el6_5.1.i686.rpmLinux
Lzo-devel update (ELSA-2014-0861) lzo-devel-2.03-3.1.el6_5.1.i686.rpmLinux
Lzo-minilzo update (ELSA-2014-0861) lzo-minilzo-2.03-3.1.el6_5.1.i686.rpmLinux
(RHSA-2014:0861)Moderate: security update lzo-debuginfo-2.06-6.el7_0.2.i686.rpmLinux
(RHSA-2014:0861)Moderate: security update lzo-debuginfo-2.06-6.el7_0.2.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234