01 Record

CVE-2014-2977

Multiple integer signedness errors in the Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.13 allow remote attackers to cause a denial of service (crash) and

UnratedPUBLISHEDCNA: mitre

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

Multiple integer signedness errors in the Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.13 allow remote attackers to cause a denial of service (crash) and

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 6.77% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 93.8% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2014-06-11 14:00Z12 YR AGO

Last updated

2024-08-06 10:28Z2 YR AGO

Reserved

2014-04-21

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-189

Data version

5.1

Document digest

1cdc43d630293122ccfad02266d3ccf28e00929d7e465514800d6f08883f621a

05 Affected products

VendorProductVersionsPlatforms

directfbdirectfbNot specified—

opensuseopensuseNot specified—

suselinux_enterprise_desktopNot specified—

suselinux_enterprise_software_development_kitNot specified—

suselinux_enterprise_workstation_extensionNot specified—

susesuse_linux_enterprise_serverNot specified—

06 References

www.openwall.com[oss-security] 20140516 [CVE-2014-2977] DirectFB integer signedness vulnerabilityhttp://www.openwall.com/lists/oss-security/2014/05/15/9mailing-listx_refsource_MLIST
www.mandriva.comMDVSA-2015:223http://www.mandriva.com/security/advisories?name=MDVSA-2015:223vendor-advisoryx_refsource_MANDRIVA
lists.opensuse.orgSUSE-SU-2015:0839http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00003.htmlvendor-advisoryx_refsource_SUSE
security.gentoo.orgGLSA-201701-55https://security.gentoo.org/glsa/201701-55vendor-advisoryx_refsource_GENTOO
lists.opensuse.orgopenSUSE-SU-2015:0807http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00019.htmlvendor-advisoryx_refsource_SUSE
mail.directfb.org[directfb-dev] 20140327 IDirectFBSurface Dispatch_Write bugshttp://mail.directfb.org/pipermail/directfb-dev/2014-March/006805.htmlmailing-listx_refsource_MLIST
advisories.mageia.orghttp://advisories.mageia.org/MGASA-2015-0176.htmlx_refsource_CONFIRM
secunia.com58448http://secunia.com/advisories/58448third-party-advisoryx_refsource_SECUNIA