Red Hat Bugzilla – Bug 1115767
CVE-2014-4715 lz4: LZ4_decompress_generic() integer overflow (32-bit arches)
Last modified: 2016-03-04 06:41:54 EST
Don A. Bailey of Lab Mouse Security reported an integer overflow issue in various implementations of LZO (Lempel–Ziv–Oberhumer) and LZ4 compression algorithms. The issue is in the handling of "literal runs" during decompression, and can lead to application crash and, possibly, code execution. The CVE-2014-4715 assignment, from the perspective of the LZ4 product, is for issue 134 fixed in r119: https://code.google.com/p/lz4/issues/detail?id=134 https://code.google.com/p/lz4/source/detail?r=119
Upstream kernel fix: -------------------- -> https://git.kernel.org/linus/4a3a99045177369700c60d074c0e525e8093b0fc
Statement: This issue does not affect the versions of the kernel package as shipped with Red Hat Enterprise Linux 5, 6, 7 and Red Hat Enterprise MRG 2.
LZ4 Fedora/EPEL package updates: -------------------------------- -> https://admin.fedoraproject.org/updates/lz4-r119-1.fc20 -> https://admin.fedoraproject.org/updates/lz4-r119-1.fc19 -> https://admin.fedoraproject.org/updates/lz4-r119-1.el6 -> https://admin.fedoraproject.org/updates/lz4-r119-1.el5
Created kernel tracking bugs for this issue: Affects: fedora-all [bug 1116362]
(In reply to Prasad J Pandit from comment #1) > Upstream kernel fix: > -------------------- > -> https://git.kernel.org/linus/4a3a99045177369700c60d074c0e525e8093b0fc There's some disagreement and an alternate fix proposed on this: http://comments.gmane.org/gmane.linux.kernel/1738748