NetSight
high7.8

CVE-2014-6416

Buffer overflow in net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, allows remote attackers to cause a denial of service (memory corruptio…

Impact

Buffer overflow in net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, allows remote attackers to cause a denial of service (memory corruption and panic) or possibly have unspecified other impact via a long unencrypted auth ticket.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.64
from 3.3 before 3.4.105
from 3.5 before 3.10.55
from 3.11 before 3.12.29
from 3.13 before 3.14.19
from 3.15 before 3.16.3
CanonicalUbuntu Linux
Versions 12.04, 14.04

Weakness classification

References