New upstream

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Avoid possible denial of service or code execution via integer overflow by using (patched) system minilzo (instead of vulnerable bundled copy).

See also: http://www.kde.org/info/security/advisory-20140803-1.txt

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix CVE-2014-4607 by upgrading to minilzo 2.08

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An integer overflow flaw was found in the way the lzo library decompressed certain archives compressed with the LZO algorithm. An attacker could create a specially crafted LZO-compressed input that, when decompressed by an application using the lzo library, would cause that application to crash or, potentially, execute arbitrary code.
(CVE-2014-4607)

Security fix for CVE-2014-4607

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix integer overflow in lzo1x_decompress_safe() allowing denial of service or code execution.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version MAIN 6.06, has grub2 packages installed that are affected by multiple vulnerabilities:

  - Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass     authentication, obtain sensitive information, or cause a denial of service (disk corruption) via backspace     characters in the (1) grub_username_get function in grub-core/normal/auth.c or the (2) grub_password_get     function in lib/crypto.c, which trigger an Off-by-two or Out of bounds overwrite memory error.
    (CVE-2015-8370)

  - Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit     platforms might allow remote attackers to execute arbitrary code via a crafted Literal Run.
    (CVE-2014-4607)

  - A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this utility under     resource pressure (for example by setting RLIMIT), causing grub2 configuration files to be truncated and     leaving the system unbootable on subsequent reboots. (CVE-2019-14865)

  - A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper     the GRUB verification process. This flaw also allows the bypass of Secure Boot protections. In order to     load an untrusted or modified kernel, an attacker would first need to establish access to the system such     as gaining physical access, obtain the ability to alter a pxe-boot network, or have remote access to a     networked system with root access. With this access, an attacker could then craft a string to cause a     buffer overflow by injecting a malicious payload that leads to arbitrary code execution within GRUB. The     highest threat from this vulnerability is to data confidentiality and integrity as well as system     availability. (CVE-2020-10713)

  - In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on     the requested allocation size. This leads the function to return invalid memory allocations which can be     further used to cause possible integrity, confidentiality and availability impacts during the boot     process. (CVE-2020-14308)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201701-14 (LZO: Multiple vulnerabilities)

    LZO is vulnerable to an integer overflow condition in the       &ldquo;lzo1x_decompress_safe&rdquo; function which could result in a possible       buffer overrun when processing maliciously crafted compressed input data.
  Impact :

    A remote attacker could send specially crafted compressed input data       possibly resulting in a Denial of Service condition or arbitrary code       execution.
  Workaround :

    There is no known workaround at this time.

This updates icecream to the current version from upstream git repository. It drops the bundled minilzo library, which had a vulnerability. Instead the system lzo library is used. (CVE-2014-4607)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

LibVNCServer was updated to version 0.9.10 to fix several security and non-security issues.

The following issues were fixed :

  - Remove xorg-x11-devel from buildRequires, X libraries     are not directly used/linked

  - libvncserver-0.9.10-ossl.patch: Update, do not     RAND_load_file('/dev/urandom', 1024) if the the PRNG is     already seeded. (It always is on linux)

  - Update to version 0.9.10

  + Moved the whole project from sourceforge to     https://libvnc.github.io/.

  + Cleaned out the autotools build system which now uses     autoreconf.

  + Updated noVNC HTML5 client to latest version.

  + Split out x11vnc sources into separate repository at     https://github.com/LibVNC/x11vnc

  + Split out vncterm sources into separate repository at     https://github.com/LibVNC/vncterm

  + Split out VisualNaCro sources into separate repository     at https://github.com/LibVNC/VisualNaCro

  + Merged Debian patches.

  + Fixed some security-related buffer overflow cases.

  + Added compatibility headers to make     LibVNCServer/LibVNCClient build on native Windows 8.

  + Update LZO to version 2.07, fixing CVE-2014-4607.

  + Merged patches from KDE/krfb.

  + Can now do IPv6 without IPv4.

  + Fixed a use-after-free issue in scale.c.

  - Update Url and download source to new project home

  - Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream     splited it out of main tarball

  - Rebase libvncserver-ossl.patch to upstream changes >     libvncserver-0.9.10-ossl.patch

  - Remove linuxvnc subpackage; like x11vnc, it has been     splited out but is depreciated and unmaintained.

An integer overflow flaw was found in the way the lzo library decompressed certain archives compressed with the LZO algorithm. An attacker could create a specially crafted LZO-compressed input that, when decompressed by an application using the lzo library, would cause that application to crash or, potentially, execute arbitrary code.
(CVE-2014-4607)

For the update to take effect, all services linked to the lzo library must be restarted or the system rebooted.

bnc#883947: CVE-2014-4607: lzo: DoS or possible RCE by allowing an attacker to change controllflow

Don A. Bailey from Lab Mouse Security discovered an integer overflow flaw in the way the lzo library decompressed certain archives compressed with the LZO algorithm. An attacker could create a specially crafted LZO-compressed input that, when decompressed by an application using the lzo library, would cause that application to crash or, potentially, execute arbitrary code.

The remote NewStart CGSL host, running version MAIN 6.06 (SP), has grub2 packages installed that are affected by multiple vulnerabilities:

  - Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass     authentication, obtain sensitive information, or cause a denial of service (disk corruption) via backspace     characters in the (1) grub_username_get function in grub-core/normal/auth.c or the (2) grub_password_get     function in lib/crypto.c, which trigger an Off-by-two or Out of bounds overwrite memory error.
    (CVE-2015-8370)

  - Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit     platforms might allow remote attackers to execute arbitrary code via a crafted Literal Run.
    (CVE-2014-4607)

  - A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this utility under     resource pressure (for example by setting RLIMIT), causing grub2 configuration files to be truncated and     leaving the system unbootable on subsequent reboots. (CVE-2019-14865)

  - A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper     the GRUB verification process. This flaw also allows the bypass of Secure Boot protections. In order to     load an untrusted or modified kernel, an attacker would first need to establish access to the system such     as gaining physical access, obtain the ability to alter a pxe-boot network, or have remote access to a     networked system with root access. With this access, an attacker could then craft a string to cause a     buffer overflow by injecting a malicious payload that leads to arbitrary code execution within GRUB. The     highest threat from this vulnerability is to data confidentiality and integrity as well as system     availability. (CVE-2020-10713)

  - In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on     the requested allocation size. This leads the function to return invalid memory allocations which can be     further used to cause possible integrity, confidentiality and availability impacts during the boot     process. (CVE-2020-14308)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
76353	Fedora 20 : lzo-2.08-1.fc20 (2014-7926)	Nessus	Fedora Local Security Checks	2014/7/3	2021/1/11	medium
77225	Fedora 19 : krfb-4.11.5-3.fc19 (2014-9151)	Nessus	Fedora Local Security Checks	2014/8/16	2021/1/11	medium
77443	Fedora 20 : distcc-3.2rc1-8.fc20 (2014-9591)	Nessus	Fedora Local Security Checks	2014/8/30	2021/1/11	medium
78316	Amazon Linux AMI : lzo (ALAS-2014-373)	Nessus	Amazon Linux Local Security Checks	2014/10/12	2020/2/18	high
81529	Fedora 20 : dump-0.4-0.24.b44.fc20 (2015-1007)	Nessus	Fedora Local Security Checks	2015/2/26	2021/1/11	medium
82183	Debian DLA-35-1 : lzo2 security update	Nessus	Debian Local Security Checks	2015/3/26	2021/1/11	high
266249	NewStart CGSL MAIN 6.06 : grub2 Multiple Vulnerabilities (NS-SA-2025-0221)	Nessus	NewStart CGSL Local Security Checks	2025/9/30	2025/10/1	high
96245	GLSA-201701-14 : LZO: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2017/1/3	2026/1/6	high
79341	Fedora 19 : icecream-1.0.1-8.20140822git.fc19 (2014-10366)	Nessus	Fedora Local Security Checks	2014/11/20	2021/1/11	medium
79343	Fedora 20 : icecream-1.0.1-8.20140822git.fc20 (2014-10468)	Nessus	Fedora Local Security Checks	2014/11/20	2021/1/11	medium
83803	openSUSE Security Update : LibVNCServer (openSUSE-2015-377)	Nessus	SuSE Local Security Checks	2015/5/26	2021/1/19	high
76448	Scientific Linux Security Update : lzo on SL6.x i386/srpm/x86_64 (20140709)	Nessus	Scientific Linux Local Security Checks	2014/7/10	2021/1/14	high
76721	openSUSE Security Update : lzo / liblzo-2-2 (openSUSE-SU-2014:0922-1)	Nessus	SuSE Local Security Checks	2014/7/24	2021/1/19	high
76976	Debian DSA-2995-1 : lzo2 - security update	Nessus	Debian Local Security Checks	2014/8/4	2021/1/11	high
301217	NewStart CGSL MAIN 6.06 (SP) : grub2 Multiple Vulnerabilities (NS-SA-2026-0016)	Nessus	NewStart CGSL Local Security Checks	2026/3/6	2026/3/7	high

检测

插件搜索

medium

medium

medium

high

medium

high

high

high

medium

medium

high

high

high

high

high