PT-2013-6338 · Suse+5 · Opensuse+7
Published
1970-01-01
·
Updated
2020-08-14
·
CVE-2014-4655
CVSS v2.0
9.3
High
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
openSUSE (affected versions not specified)
SUSE Linux Enterprise (affected versions not specified)
Description
The issue affects multiple packages in the openSUSE and SUSE Linux Enterprise operating systems, allowing for remote exploitation. This can lead to a violation of confidentiality, integrity, and availability of protected information. The
snd ctl elem add function in the ALSA control implementation is also mentioned as being vulnerable to an integer overflow and limit bypass, which can be exploited locally.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Integer Overflow
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alsa
Alt Linux
Centos
Red Hat
Suse Linux Enterprise
Suse
Ubuntu
Opensuse