Boletines de Vulnerabilidades

IBM Security Bulletin: LZO algorithm vulnerability (CVE-2014-4607) as per June, 2014 X-Force Report.


Información sobre el sistema

   
Software afectado IBM

Descripción

A vulnerability has been found in LZO algorithm (CVE-2014-4607) as reported as per June, 2014 X-Force Report that may affect RedHat Platform. SmartCloud Provisioning is not affected by this vulnerability. SmartCloud Provisioning is released with Virtual Image Library component that pre-requisites LZO packages as available in Red Hat Enterprise Linux 6.x installation image or Red Hat Network that may be vulnerable. Red Hat has released critical patch updates and updated LZO packages (see

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_lzo_algorithm_vulnerability_cve_2014_4607_as_per_june_2014_x_force_report?lang=en_us

Identificadores estándar

Propiedad Valor
CVE CVE-2014-4607 ,CVE-2014-3566 ,CVE-2014-3508 ,CVE-2014-5139 ,CVE-2014-3509 ,CVE-2014-3505 ,CVE-2014-3506 ,CVE-2014-3507 ,CVE-2014-3510 ,CVE-2014-3511 ,CVE-2014-3512 ,CVE-2014-3513 and CVE-2014-5119.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2014-10-27

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT