NetSight
IP …
high7.1

CVE-2014-6418

net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly validate auth replies, which allows remote attackers to cause a denial …

Impact

net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly validate auth replies, which allows remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via crafted data from the IP address of a Ceph Monitor.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.64
from 3.3 before 3.4.105
from 3.5 before 3.10.55
from 3.11 before 3.12.29
from 3.13 before 3.14.19
from 3.15 before 3.16.3
CanonicalUbuntu Linux
Versions 12.04, 14.04

Weakness classification

CWE-399

References