NVD

Id
33918  
Name
CVE-2014-6417  
Description
net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly consider the possibility of kmalloc failure, which allows remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via a long unencrypted auth ticket.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2014-09-28  
Modified Date
2014-10-24  
Seq
2014-6417  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
176007 33918 CVE-2014-6417 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c27a3e4d667fdcad3db7b104f75659478e0c68d8  View
176008 33918 CVE-2014-6417 http://tracker.ceph.com/issues/8979  View
176009 33918 CVE-2014-6417 http://tracker.ceph.com/issues/9560  View
176010 33918 CVE-2014-6417 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.3  View
176011 33918 CVE-2014-6417 [oss-security] 20140915 Re: CVE Request: libceph auth token overflow / Linux kernel  View
176012 33918 CVE-2014-6417 USN-2376-1  View
176013 33918 CVE-2014-6417 USN-2377-1  View
176014 33918 CVE-2014-6417 USN-2378-1  View
176015 33918 CVE-2014-6417 USN-2379-1  View
176016 33918 CVE-2014-6417 https://bugzilla.redhat.com/show_bug.cgi?id=1142072  View
176017 33918 CVE-2014-6417 https://github.com/torvalds/linux/commit/c27a3e4d667fdcad3db7b104f75659478e0c68d8  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15570 JVNDB-2014-004445 Linux Kernel で使用される Ceph の net/ceph/auth_x.c におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel で使用される Ceph の net/ceph/auth_x.c は、kmalloc の失敗の可能性を適切に考慮しないため、サービス運用妨害 (システムクラッシュ) 状態にされる脆弱性が存在します。 CVE-2014-6417 73709 CVE-2014-6417 33918 7.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004445.html 2014-09-17 2014-09-30 View