CVE-2014-4656 — Integer Overflow or Wraparound in Kernel

CWE-190 — Integer Overflow or Wraparound14 documents9 sources
Severity
4.6MEDIUMNVD
EPSS
0.1%
top 77.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
9
Linux KernelCanonical Ubuntu LinuxRedhat Enterprise Linux Desktop+6 more
Timeline
PublishedJul 3
Latest updateMay 13

Description

Multiple integer overflows in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allow local users to cause a denial of service by leveraging /dev/snd/controlCX access, related to (1) index values in the snd_ctl_add function and (2) numid values in the snd_ctl_remove_numid_conflict function.

CVSS vector

AV:L/AC:L/C:P/I:P/A:PExploitability: 3.9 | Impact: 6.4

Affected Packages6 packages

▶NVDlinux/linux_kernel< 3.15.2
▶Debianlinux/linux_kernel< 3.14.9-1+3

Also affects: Ubuntu Linux 12.04, Enterprise Linux 6.6

Patches

Patch: github.com ↗Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-8hjr-53g2-5g69: Multiple integer overflows in sound/core/control↗2022-05-13
▶
CVEList
CVE-2014-4656: Multiple integer overflows in sound/core/control↗2014-07-03
▶
OSV
CVE-2014-4656: Multiple integer overflows in sound/core/control↗2014-07-03
▶

📋Vendor Advisories

9
Android
CVE-2014-4656: Android Security Bulletin 2017-04-01 CVE: CVE-2014-4656 Severity: HIGH References: A-34464977 Upstream kernel↗2017-04-01
▶
Ubuntu
Linux kernel (OMAP4) vulnerabilities↗2014-09-02
▶
Ubuntu
Linux kernel vulnerabilities↗2014-09-02
▶
Ubuntu
Linux kernel (Trusty HWE) vulnerabilities↗2014-09-02
▶
Ubuntu
Linux kernel (EC2) vulnerabilities↗2014-09-02
▶

💬Community

1
Bugzilla
CVE-2014-4656 Kernel: ALSA: control: integer overflow in id.index & id.numid↗2014-06-26
▶
CVE-2014-4656 — Integer Overflow or Wraparound | cvebase