CVE-2014-4715 - Yann Collet LZ4 before r119, when used on certain 32-bit platforms that allocate memory beyond 0x800

CVE-2014-4715

Summary

Yann Collet LZ4 before r119, when used on certain 32-bit platforms that allocate memory beyond 0x80000000, does not properly detect integer overflows, which allows context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted Literal Run, a different vulnerability than CVE-2014-4611.

References

Vulnerable Configurations

cpe:2.3:a:yann_collet:lz4:*:*:*:*:*:*:*:*
cpe:2.3:a:yann_collet:lz4:*:*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 17-07-2014 - 05:07)
Impact:
Exploitability:

CWE

CWE-189

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:N/A:P

refmap via4

confirm	http://fastcompression.blogspot.fr/2014/07/software-vulnerabilities-how-it-works.html https://code.google.com/p/lz4/issues/detail?id=134 https://code.google.com/p/lz4/source/detail?r=119
misc	http://blog.securitymouse.com/2014/07/i-was-wrong-proving-lz4-exploitable.html
secunia	59770

Last major update

17-07-2014 - 05:07

Published

03-07-2014 - 04:22

Last modified

17-07-2014 - 05:07