Multiple integer overflows in the lzo1x_decompress_safe function in lib/lzo/lzo1x_decompress_safe.c in the LZO decompressor in the Linux kernel before 3.15.2 allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Literal Run. NOTE: the author of the LZO algorithms says "the Linux kernel is *not* affected; media hype.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 3, 2014 |
| Freebsd | — | Upgrade busyboxUpgrade lzo2 | Dec 10, 2025 | Jun 26, 2014 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libs | Jun 17, 2020 | Jul 3, 2014 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-devel | Dec 18, 2019 | Jul 3, 2014 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 3, 2014 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docs | Dec 18, 2015 | Jul 3, 2014 |
| Ubuntu | — | Upgrade linux-image-2.6.32-68-386Upgrade linux-image-2.6.32-68-versatileUpgrade linux-image-3.13.0-40-powerpc64-embUpgrade linux-image-3.16.0-25-powerpc-smpUpgrade linux-image-3.2.0-72-virtualUpgrade linux-image-3.13.0-40-powerpc-e500mcUpgrade linux-image-3.8.0-44-genericUpgrade linux-image-2.6.32-68-serverUpgrade linux-image-3.2.0-72-powerpc-smpUpgrade linux-image-2.6.32-68-sparc64Upgrade linux-image-3.16.0-25-powerpc64-smpUpgrade linux-image-3.2.0-72-generic-paeUpgrade linux-image-2.6.32-68-lpiaUpgrade linux-image-3.2.0-72-highbankUpgrade linux-image-2.6.32-68-genericUpgrade linux-image-3.13.0-40-powerpc64-smpUpgrade linux-image-3.2.0-72-powerpc64-smpUpgrade linux-image-3.13.0-40-genericUpgrade linux-image-3.16.0-25-genericUpgrade linux-image-3.2.0-72-omapUpgrade linux-image-2.6.32-68-powerpcUpgrade linux-image-3.13.0-40-generic-lpaeUpgrade linux-image-2.6.32-68-virtualUpgrade linux-image-3.16.0-25-generic-lpaeUpgrade linux-image-3.16.0-25-powerpc64-embUpgrade linux-image-2.6.32-68-sparc64-smpUpgrade linux-image-3.2.0-72-genericUpgrade linux-image-2.6.32-68-ia64Upgrade linux-image-3.16.0-25-lowlatencyUpgrade linux-image-3.13.0-40-powerpc-e500Upgrade linux-image-2.6.32-68-powerpc64-smpUpgrade linux-image-2.6.32-68-powerpc-smpUpgrade linux-image-3.13.0-40-powerpc-smpUpgrade linux-image-2.6.32-68-preemptUpgrade linux-image-2.6.32-372-ec2Upgrade linux-image-2.6.32-68-generic-paeUpgrade linux-image-3.13.0-40-lowlatencyUpgrade linux-image-3.16.0-25-powerpc-e500mcUpgrade linux-image-3.2.0-1456-omap4Upgrade linux-image-3.11.0-26-generic-lpaeUpgrade linux-image-3.11.0-26-generic | Nov 8, 2024 | Jul 3, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub