CVE-2014-6416

Published: Sep 28, 2014Modified: May 6, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Buffer overflow in net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, allows remote attackers to cause a denial of service (memory corruption and panic) or possibly have unspecified other impact via a long unencrypted auth ticket.

Affected (8)

Products: Linux: Linux Kernel · Canonical: Ubuntu Linux

1 product

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 3.2.64
Linux Linux Kernel	From 3.11 to 3.12.29
Linux Linux Kernel	From 3.13 to 3.14.19
Linux Linux Kernel	From 3.15 to 3.16.3
Linux Linux Kernel	From 3.3 to 3.4.105
Linux Linux Kernel	From 3.5 to 3.10.55

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (22)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c27a3e4d667fdcad3db7b104f75659478e0c68d8

Source: cve@mitre.org

http://tracker.ceph.com/issues/8979

Source: cve@mitre.org

Broken Link

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.3

Source: cve@mitre.org

ExploitVendor Advisory

http://www.openwall.com/lists/oss-security/2014/09/15/7

Source: cve@mitre.org

ExploitMailing List

http://www.securityfocus.com/bid/69805

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2376-1

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2377-1

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2378-1

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/USN-2379-1

Source: cve@mitre.org

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1142060

Source: cve@mitre.org

Issue TrackingThird Party Advisory

https://github.com/torvalds/linux/commit/c27a3e4d667fdcad3db7b104f75659478e0c68d8

Source: cve@mitre.org

ExploitThird Party Advisory

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c27a3e4d667fdcad3db7b104f75659478e0c68d8

Source: af854a3a-2127-422b-91ae-364da2661108

http://tracker.ceph.com/issues/8979

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.16.3

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://www.openwall.com/lists/oss-security/2014/09/15/7

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitMailing List

http://www.securityfocus.com/bid/69805

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-2376-1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.ubuntu.com/usn/USN-2377-1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.ubuntu.com/usn/USN-2378-1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.ubuntu.com/usn/USN-2379-1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1142060

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

https://github.com/torvalds/linux/commit/c27a3e4d667fdcad3db7b104f75659478e0c68d8

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.