Summary
Don A. Bailey discovered that LZO incorrectly handled certain input data.
An attacker could use this issue to cause LZO to crash, resulting in a
denial of service, or possibly execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | lzo2 | 2.06-1.2ubuntu1.1 |
Vulnerabilities 1
-
Unscored —
Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allo…
References
-
report
https://ubuntu.com/security/CVE-2014-4607