CVE-2014-6418
net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly validate auth replies, which allows remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via crafted data from the…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (4.88%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly validate auth replies, which allows remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via crafted data from the IP address of a Ceph Monitor.
- CVSS 2.0
- 7.1 HIGHAV:N/AC:M/Au:N/C:N/I:N/A:C
- EPSS
- 4.88% probability · 92th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-399
- Affected
- linux/linux kernel · canonical/ubuntu linux
- Source
- cve@mitre.org
References
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c27a3e4d667fdcad3db7b104f75659478e0c68d8
- http://tracker.ceph.com/issues/8979Exploit, Third Party Advisory
- http://tracker.ceph.com/issues/9561Third Party Advisory
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.3Exploit, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2014/09/15/7Mailing List
- http://www.ubuntu.com/usn/USN-2376-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2377-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2378-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2379-1Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1142073Issue Tracking, Third Party Advisory
- https://github.com/torvalds/linux/commit/c27a3e4d667fdcad3db7b104f75659478e0c68d8Exploit, Third Party Advisory
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c27a3e4d667fdcad3db7b104f75659478e0c68d8
- http://tracker.ceph.com/issues/8979Exploit, Third Party Advisory
- http://tracker.ceph.com/issues/9561Third Party Advisory
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.3Exploit, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2014/09/15/7Mailing List
- http://www.ubuntu.com/usn/USN-2376-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2377-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2378-1Third Party Advisory
- http://www.ubuntu.com/usn/USN-2379-1Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1142073Issue Tracking, Third Party Advisory
- https://github.com/torvalds/linux/commit/c27a3e4d667fdcad3db7b104f75659478e0c68d8Exploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.