Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4_uncompress function in lib/lz4/lz4_decompress.c in the Linux kernel before 3.15.2, on 32-bit platforms might allow context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted Literal Run that would be improperly handled by programs not complying with an API limitation, a different vulnerability than CVE-2014-4715.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
LZ4‘lz4.c’整数溢出漏洞
Vulnerability Description
LZ4是法国软件开发者Yann Collet所研发的一种无损数据压缩算法。 基于32位平台上的Linux kernel 3.15.1及之前的版本的lib/lz4/lz4_decompress.c文件中的‘lz4_uncompress’函数和Yann Collet LZ4 r118之前的版本中使用的LZ4压缩算法中存在整数溢出漏洞。攻击者可利用该漏洞造成拒绝服务(内存损坏),也可能执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A