CoreCVE
Back

HIGH

Multiple integer overflows in TrueCrypt 7.1a allow local users to (1) obtain sensitive information via vectors involving a crafted item->OriginalLength value in the MainThreadProc function in EncryptedIoQueue.c or (2) cause a denial of service (memory consumption) via vectors involving large StartingOffset and Length values in the ProcessVolumeDeviceControlIrp function in Ntdriver.c

Published Mar 19, 2018

Description

Multiple integer overflows in TrueCrypt 7.1a allow local users to (1) obtain sensitive information via vectors involving a crafted item->OriginalLength value in the MainThreadProc function in EncryptedIoQueue.c or (2) cause a denial of service (memory consumption) via vectors involving large StartingOffset and Length values in the ProcessVolumeDeviceControlIrp function in Ntdriver.c.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (3)

CWE-190

Integer Overflow

CWE-200

Exposure of Sensitive Information

CWE-400

Uncontrolled Resource Consumption

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Mar 19, 2018
Updated Aug 6, 2024
Reserved Apr 17, 2014
Link CVE-2014-2885
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2014-2885
Red Hat
Severity n/a
Public date n/a
Links CVE-2014-2885