CVE-2014-6418

High

Published: 28/09/2014(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The file net/ceph/auth_x.c in Ceph, as used in the Linux kernel before version 3.16.3, does not properly validate auth replies, allowing remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via crafted data from the IP address of a Ceph Monitor.

Risk Assessment

This vulnerability may lead to significant disruptions in system operation, potentially affecting the availability of services within the organization.

Recommendation

It is recommended to update the Linux kernel to version 3.16.3 or later to mitigate this vulnerability.

Other vulnerabilities in Ceph w jądrze Linux

CVE-2014-6417High
In Ceph, used in the Linux kernel before version 3.16.3, memory allocation errors are not properly handled, potentially leading to system crashes or other unspecified impacts via a long unencrypted auth ticket.

Original NVD description (English source)

net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly validate auth replies, which allows remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via crafted data from the IP address of a Ceph Monitor.