CVE-2014-6417

High

Published: 28/09/2014(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

In Ceph, used in the Linux kernel before version 3.16.3, memory allocation errors are not properly handled, potentially leading to system crashes or other unspecified impacts via a long unencrypted auth ticket.

Risk Assessment

Remote attackers can cause system crashes, affecting the availability of services within the organization.

Recommendation

It is recommended to update the Linux kernel to version 3.16.3 or later to mitigate this vulnerability.

Other vulnerabilities in Ceph w jądrze Linux

CVE-2014-6418High
The file net/ceph/auth_x.c in Ceph, as used in the Linux kernel before version 3.16.3, does not properly validate auth replies, allowing remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via crafted data from the IP address of a Ceph Monitor.

Original NVD description (English source)

net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly consider the possibility of kmalloc failure, which allows remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via a long unencrypted auth ticket.