CVE-2014-4608: Integer Overflow
DISPUTED Multiple integer overflows in the lzo1xdecompresssafe function in lib/lzo/lzo1xdecompresssafe.c in the LZO decompressor in the Linux kernel before 3.15.2 allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Literal Run. NOTE: the author of the LZO algorithms says "the Linux kernel is not affected; media hype."
Other sources
An integer overflow can occur when processing any variant of a "literal run" in the lzo1xdecompresssafe function. Each of these three locations is subject to an integer overflow when processing zero bytes.
This exposes the code that copies literals to memory corruption. An interesting side effect of the vulnerable code is that the value of 'op' can point to a region of memory just before the start of 'out'.
It should be noted that on 64bit architectures, the overflow is still possible, but impractical. An overflow would require so much input data that an attack would obviously be infeasible even on modern computers.
Upstream patch: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=206a81c18401c0cde6e579164f752c4b147324ce
References: http://seclists.org/oss-sec/2014/q2/666
Acknowledgements:
Red Hat would like to thank Don A. Bailey from Lab Mouse Security for reporting this issue.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4608?
CVE-2014-4608 has a severity rating that indicates a potential denial of service due to memory corruption vulnerabilities.
How do I fix CVE-2014-4608?
To fix CVE-2014-4608, update to a version of the Linux kernel that is 3.15.2 or higher, or apply relevant patches provided by your distribution.
What software is affected by CVE-2014-4608?
CVE-2014-4608 affects multiple versions of the Linux kernel and distributions like openSUSE, SUSE Linux Enterprise, and Ubuntu.
Who are the potential attackers for CVE-2014-4608?
Context-dependent attackers are able to exploit CVE-2014-4608 by crafting specific LZO decompression inputs.
What kind of vulnerability is CVE-2014-4608?
CVE-2014-4608 is classified as an integer overflow vulnerability leading to memory corruption.