NVD

Id
33917  
Name
CVE-2014-6416  
Description
Buffer overflow in net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, allows remote attackers to cause a denial of service (memory corruption and panic) or possibly have unspecified other impact via a long unencrypted auth ticket.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2014-09-28  
Modified Date
2015-04-29  
Seq
2014-6416  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
175996 33917 CVE-2014-6416 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c27a3e4d667fdcad3db7b104f75659478e0c68d8  View
175997 33917 CVE-2014-6416 http://tracker.ceph.com/issues/8979  View
175998 33917 CVE-2014-6416 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.3  View
175999 33917 CVE-2014-6416 [oss-security] 20140915 Re: CVE Request: libceph auth token overflow / Linux kernel  View
176000 33917 CVE-2014-6416 69805  View
176001 33917 CVE-2014-6416 USN-2376-1  View
176002 33917 CVE-2014-6416 USN-2377-1  View
176003 33917 CVE-2014-6416 USN-2378-1  View
176004 33917 CVE-2014-6416 USN-2379-1  View
176005 33917 CVE-2014-6416 https://bugzilla.redhat.com/show_bug.cgi?id=1142060  View
176006 33917 CVE-2014-6416 https://github.com/torvalds/linux/commit/c27a3e4d667fdcad3db7b104f75659478e0c68d8  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15569 JVNDB-2014-004444 Linux Kernel で使用される Ceph の net/ceph/auth_x.c におけるバッファオーバーフローの脆弱性 Linux Kernel で使用される Ceph の net/ceph/auth_x.c には、バッファオーバーフローの脆弱性が存在します。 CVE-2014-6416 73708 CVE-2014-6416 33917 7.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004444.html 2014-09-17 2014-09-30 View