CVE-2023-44466

An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5

published September 29, 2023

CVSS
—
EPSS
46%
Percentile
98.8
In the wild
Unconfirmed
What it is

An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an integer signedness error, leading to a buffer overflow and remote code execution via HELLO or one of the AUTH frames. This occurs because of an untrusted length taken from a TCP packet in ceph_decode_32.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.45589 · 98.8th percentile
Published
2023-09-29T00:00Z
EPSS history
Timeline
  • 29 SEP 00:00Z
    An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5
    cvelistv5