NetSight
IP …
high7.8

CVE-2014-6417

net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly consider the possibility of kmalloc failure, which allows remote attack…

Impact

net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly consider the possibility of kmalloc failure, which allows remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via a long unencrypted auth ticket.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.4.105
from 3.5 before 3.10.55
from 3.11 before 3.12.29
from 3.13 before 3.14.19
from 3.15 before 3.16.3

Weakness classification

CWE-399

References