ROS-20260806-73-0021

The vulnerabilities of the confaultfinish and clearstandby functions in the net/ceph/messenger.c module of the Linux kernel are related to deficiencies in the authentication process. Exploiting these vulnerabilities could allow an attacker to execute arbitrary code...

The vulnerability of the functions set_secret() and ceph_crypto_key_decode() in the net/ceph/crypto.c module of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions setsecret and cephcryptokeydecode in the net/ceph/crypto.c module of the Linux kernel is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow a remote attacker t...

The vulnerability of the handle_auth_session_key() function in the net/ceph/auth_x.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the handleauthsessionkey function in the net/ceph/authx.c module, which is part of the Linux kernel’s networking functions, relates to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

PT-2025-55400

Уязвимость функции mon handle auth done модуля net/ceph/mon client.c реализации сетевых функций ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой...

PT-2025-55398

Уязвимость функции alloc choose arg map модуля net/ceph/osdmap.c реализации сетевых функций ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой...

CVE-2023-44466

CVE-2023-44466 is described as a Linux kernel issue in net/ceph/messenger_v2.c (before 6.4.5) with a signedness error that enables a buffer overflow and remote code execution via HELLO or AUTH frames, caused by an untrusted length from a TCP packet in ceph_decode_32. The Connected documents reite...

CVE-2023-44466: Buffer Copy without Checking Size of Input

An issue was discovered in net/ceph/messengerv2.c in the Linux kernel before 6.4.5. There is an integer signedness error, leading to a buffer overflow and remote code execution via HELLO or one of the AUTH frames. This occurs because of an untrusted length taken from a TCP packet in cephdecode32...

PT-2023-5669

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.5 Description An issue was discovered in the Linux kernel, specifically in net/ceph/messenger v2.c, where an integer signedness error leads to a buffer overflow and remote code execution via HELLO or one of t...

EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1500)

According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - The IPv6 DCCP implementation in the Linux kernel mishandles inheritance, which allows local users to cause a denial of...

The vulnerability of the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the cryptographic list of the Linux operating system’s kernel API interface is related to resource management errors. Exploiting this vulnerability could allow a local attacker to trigger a service failure system crash or memory corruption due to improper interaction with the...

CVE-2016-10153: Undefined Security Weakness

The crypto scatterlist API in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial of service system crash or memory corruption or possibly have unspecified other impact by leveraging reliance on earlier...

CVE-2016-10153

The crypto scatterlist API in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial of service system crash or memory corruption or possibly have unspecified other impact by leveraging reliance on earlier...

CVE-2014-6416

Buffer overflow in net/ceph/authx.c in Ceph, as used in the Linux kernel before 3.16.3, allows remote attackers to cause a denial of service memory corruption and panic or possibly have unspecified other impact via a long unencrypted auth ticket...

CVE-2014-6418

net/ceph/authx.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly validate auth replies, which allows remote attackers to cause a denial of service system crash or possibly have unspecified other impact via crafted data from the IP address of a Ceph Monitor...

CVE-2014-6417

net/ceph/authx.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly consider the possibility of kmalloc failure, which allows remote attackers to cause a denial of service system crash or possibly have unspecified other impact via a long unencrypted auth ticket...

CVE-2014-6417: Undefined Security Weakness

net/ceph/authx.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly consider the possibility of kmalloc failure, which allows remote attackers to cause a denial of service system crash or possibly have unspecified other impact via a long unencrypted auth ticket...

CVE-2014-6418: Undefined Security Weakness

net/ceph/authx.c in Ceph, as used in the Linux kernel before 3.16.3, does not properly validate auth replies, which allows remote attackers to cause a denial of service system crash or possibly have unspecified other impact via crafted data from the IP address of a Ceph Monitor...

CVE-2014-6416: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in net/ceph/authx.c in Ceph, as used in the Linux kernel before 3.16.3, allows remote attackers to cause a denial of service memory corruption and panic or possibly have unspecified other impact via a long unencrypted auth ticket...

Amazon Linux AMI : kernel (ALAS-2013-218)

The btsockrecvmsg function in net/bluetooth/afbluetooth.c in the Linux kernel before 3.9-rc7 does not properly initialize a certain length variable, which allows local users to obtain sensitive information from kernel stack memory via a crafted recvmsg or recvfrom system call. The udfencodefh...

Null pointer dereference

net/ceph/authnone.c in the Linux kernel through 3.10 allows remote attackers to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via an authreply message that triggers an attempted buildrequest operation...