CVE-2014-4607

HIGH 8.8CVE-2014-4607 · Published 12/02/2020 · updated 17/06/2026

In short

CVE-2014-4607 is a HIGH (CVSS 8.8) vulnerability affecting liblzo2 (oberhumer), lzo2 (oberhumer).
Chance of exploitation in the next 30 days (EPSS): 5.3%, higher than 92.6% of all vulnerabilities.
Fix: update to 2.07 or later.

Package	Affected versions	Patched versions
liblzo2 oberhumer	`< 2.07`	`2.07`
lzo2 oberhumer	`< 2.07`	`2.07`

Description

Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to execute arbitrary code via a crafted Literal Run.

References

blog.securitymouse.com/2014/06/raising-lazarus-20-year-old-bug-that.html · Exploit
web.archive.org/web/20140701023922/http://www.oberhumer.com/opensource/lzo · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free