CVE:CVE-2014-4608
CNNVD:CNNVD-201406-704
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。
Linux kernel 3.15.1及之前版本的LZO解码器中的lib/lzo/lzo1x_decompress_safe.c文件的‘lzo1x_decompress_safe’函数存在整数溢出漏洞。远程攻击者可利用该漏洞造成拒绝服务（内存损坏）。
solution:Upgrade linux linux_kernel to a higher version than 3.15.2,and avoid the version (,3.15.2); Upgrade opensuse opensuse to a higher version than 11.4,and avoid the version 11.4; Upgrade suse linux_enterprise_real_time_extension to a higher version than 11:sp3,and avoid the version 11:sp3; Upgrade suse linux_enterprise_server to a higher version than 11:sp2,and avoid the version 11:sp2; Upgrade canonical ubuntu_linux to a higher version than 10.04,12.04,14.04,14.10,and avoid the version 10.04,12.04,14.04,14.10