CVE-2014-4656 in Linux Kernel
Summary
Multiple integer overflows in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allow local users to cause a denial of service by leveraging /dev/snd/controlCX access, related to (1) index values in the snd_ctl_add function and (2) numid values in the snd_ctl_remove_numid_conflict function.
Reservation
06/25/2014
Disclosure
07/03/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 65973 | Linux Kernel snd_ctl_add numeric error | 189 | Unproven | Official fix | CVE-2014-4656 |