CVE-2014-4655 in Google Android

요약 (영어)

The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not properly maintain the user_ctl_count value, which allows local users to cause a denial of service (integer overflow and limit bypass) by leveraging /dev/snd/controlCX access for a large number of SNDRV_CTL_IOCTL_ELEM_REPLACE ioctl calls.

예약하다

2014. 06. 25.

공개

2014. 07. 03.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
91445	Google Android Kernel Sound Local Privilege Escalation	189	정의되지 않음	공식 수정	CVE-2014-4655
65974	Linux Kernel Local Privilege Escalation	189	입증되지 않음	공식 수정	CVE-2014-4655