The snd_compress_check_input function in sound/core/compress_offload.c in the ALSA subsystem in the Linux kernel before 3.17 does not properly check for an integer overflow, which allows local users to cause a denial of service (insufficient memory allocation) or possibly have unspecified other impact via a crafted SNDRV_COMPRESS_SET_PARAMS ioctl call.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: google_android

Published: 2016-06-27T10:00:00

Updated: 2024-08-06T14:02:37.888Z

Reserved: 2016-06-24T00:00:00

Link: CVE-2014-9904

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2016-06-27T10:59:01.283

Modified: 2024-11-21T02:21:56.533

Link: CVE-2014-9904

cve-icon Redhat

Severity : Low

Publid Date: 2014-07-16T00:00:00Z

Links: CVE-2014-9904 - Bugzilla