CVE-2014-2885 in TrueCrypt
Summary
Multiple integer overflows in TrueCrypt 7.1a allow local users to (1) obtain sensitive information via vectors involving a crafted item->OriginalLength value in the MainThreadProc function in EncryptedIoQueue.c or (2) cause a denial of service (memory consumption) via vectors involving large StartingOffset and Length values in the ProcessVolumeDeviceControlIrp function in Ntdriver.c.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
04/17/2014
Disclosure
03/19/2018
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 114775 | TrueCrypt EncryptedIoQueue.c ProcessVolumeDeviceControlIrp resource consumption | 400 | Not defined | Not defined | CVE-2014-2885 |