net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly validate auth replies, which allows remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via crafted data from the IP address of a Ceph Monitor.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 28, 2014 |
| Ubuntu | — | Upgrade linux-image-3.13.0-37-lowlatencyUpgrade linux-image-3.13.0-37-powerpc-e500mcUpgrade linux-image-3.13.0-37-powerpc-e500Upgrade linux-image-3.2.0-70-powerpc64-smpUpgrade linux-image-3.2.0-70-genericUpgrade linux-image-3.13.0-37-generic-lpaeUpgrade linux-image-3.13.0-37-powerpc64-embUpgrade linux-image-3.2.0-70-highbankUpgrade linux-image-3.13.0-37-genericUpgrade linux-image-3.2.0-70-virtualUpgrade linux-image-3.13.0-37-powerpc64-smpUpgrade linux-image-3.2.0-70-powerpc-smpUpgrade linux-image-3.2.0-1455-omap4Upgrade linux-image-3.2.0-70-omapUpgrade linux-image-3.2.0-70-generic-paeUpgrade linux-image-3.13.0-37-powerpc-smp | Nov 8, 2024 | Sep 28, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub