Name: CVE-2018-16846: Allocation of Resources Without Limits or Throttling
Creator: Rapid7
Published: 2019-01-15T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2018-16846, CWE-770, CVSS 6.5, EPSS 0.04603

It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices.

CVSS Details

CVSS 3.1 Base Score: 6.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade ceph-ansibleUpgrade ceph-selinuxUpgrade libradosstriper1Upgrade python-cephfsUpgrade ceph-radosgwUpgrade nfs-ganesha-cephUpgrade libcephfs-develUpgrade ceph-iscsi-configUpgrade python-rgwUpgrade libntirpc-debuginfoUpgrade python-crypto-debuginfoUpgrade libntirpcUpgrade python2-cryptoUpgrade ceph-debuginfoUpgrade ceph-fuseUpgrade librbd-develUpgrade ceph-baseUpgrade librgw2Upgrade librados-develUpgrade nfs-ganesha-debuginfoUpgrade libcephfs2Upgrade rbd-mirrorUpgrade nfs-ganeshaUpgrade cephmetrics-ansibleUpgrade ceph-commonUpgrade librgw-develUpgrade nfs-ganesha-rgwUpgrade ceph-mds	Mar 5, 2020	Jan 15, 2019
Debian	—	Upgrade ceph	Mar 12, 2019	Jan 15, 2019
Huawei Euleros 2_0_sp8	—	Upgrade librados2Upgrade python-radosUpgrade librbd1Upgrade python-rbd	Jul 26, 2019	Jan 15, 2019
Redhat_linux	—	Upgrade ceph-commonUpgrade libcephfs-develUpgrade libntirpcUpgrade rbd-mirrorUpgrade ceph-debuginfoUpgrade python-crypto-debuginfoUpgrade cephmetrics-ansibleUpgrade ceph-iscsi-configUpgrade nfs-ganesha-debuginfoUpgrade ceph-fuseUpgrade python-cephfsUpgrade librados-develUpgrade ceph-selinuxUpgrade librbd-develUpgrade python-rgwUpgrade python2-cryptoUpgrade nfs-ganeshaUpgrade libntirpc-debuginfoUpgrade libcephfs2Upgrade ceph-radosgwUpgrade librgw-develUpgrade ceph-baseUpgrade ceph-ansibleUpgrade nfs-ganesha-rgwUpgrade ceph-mdsUpgrade libradosstriper1Upgrade librgw2Upgrade nfs-ganesha-ceph	Mar 5, 2020	Jan 15, 2019
Suse	—	Upgrade ceph-mgrUpgrade python-radosUpgrade libradosstriper-develUpgrade rbd-nbdUpgrade python-rbdUpgrade python3-rbdUpgrade ceph-monUpgrade ceph-commonUpgrade librados-develUpgrade librbd1Upgrade ceph-baseUpgrade librgw-develUpgrade libcephfs-develUpgrade libcephfs2Upgrade librgw2Upgrade python-rgwUpgrade ceph-testUpgrade librados2Upgrade ceph-radosgwUpgrade rados-objclass-develUpgrade python3-rgwUpgrade python3-radosUpgrade ceph-resource-agentsUpgrade ceph-osdUpgrade libradosstriper1Upgrade python-cephfsUpgrade ceph-mdsUpgrade cephUpgrade librbd-develUpgrade rbd-fuseUpgrade ceph-fuseUpgrade python3-cephfsUpgrade rbd-mirror	Feb 27, 2019	Jan 15, 2019
Ubuntu	—	Upgrade cephUpgrade ceph-common	Jun 25, 2019	Jan 15, 2019
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jan 20, 2025	Jan 15, 2019

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence