The vulnerability of the handle_auth_session_key() function in the net/ceph/auth_x.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the handleauthsessionkey function in the net/ceph/authx.c module, which is part of the Linux kernel’s networking functions, relates to buffer out-of-buffer writing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

PT-2014-7216 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.16.3 Description: The issue is related to the net/ceph/auth x.c file in Ceph, as used in the Linux kernel. It does not properly consider the possibility of kmalloc failure, which allows remote attackers to cau...