Oval Definition:	oval:com.ubuntu.trusty:def:20144715000
Revision Date: 2014-07-03 Version: 1 Title: CVE-2014-4715 on Ubuntu 14.04 LTS (trusty) - medium. Description: Yann Collet LZ4 before r119, when used on certain 32-bit platforms that allocate memory beyond 0x80000000, does not properly detect integer overflows, which allows context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted Literal Run, a different vulnerability than CVE-2014-4611. Family: unix Class: vulnerability Status: Reference(s): CVE-2014-4715 Platform(s): Ubuntu 14.04 LTS Product(s): Definition Synopsis Ubuntu 14.04 LTS (trusty) is installed. AND Package Information The vulnerability of the 'eet' package in trusty is not known (status: 'needs-triage'). It is pending evaluation. OR NOT While related to the CVE in some way, the 'firefox' package in trusty is not affected (note: '42.0+build2-0ubuntu0.14.04.1'). OR The vulnerability of the 'grub2' package in trusty is not known (status: 'needs-triage'). It is pending evaluation. OR The vulnerability of the 'gtkwave' package in trusty is not known (status: 'needs-triage'). It is pending evaluation. OR The 'lz4' package in trusty is affected and needs fixing. OR The vulnerability of the 'php-horde-lz4' package in trusty is not known (status: 'needs-triage'). It is pending evaluation. OR NOT While related to the CVE in some way, the 'pytables' package in trusty is not affected (note: 'code not present'). OR NOT While related to the CVE in some way, the 'thunderbird' package in trusty is not affected (note: '1:38.4.0+build3-0ubuntu0.14.04.1').
BACK