It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rbd-mirrorUpgrade librados-develUpgrade librgw2Upgrade nfs-ganesha-debuginfoUpgrade ceph-baseUpgrade nfs-ganesha-rgwUpgrade librgw-develUpgrade libcephfs2Upgrade cephmetrics-ansibleUpgrade ceph-mdsUpgrade ceph-commonUpgrade nfs-ganeshaUpgrade libntirpc-debuginfoUpgrade python-crypto-debuginfoUpgrade libcephfs-develUpgrade librbd-develUpgrade ceph-selinuxUpgrade python-cephfsUpgrade ceph-fuseUpgrade ceph-radosgwUpgrade ceph-iscsi-configUpgrade libradosstriper1Upgrade ceph-ansibleUpgrade libntirpcUpgrade nfs-ganesha-cephUpgrade python2-cryptoUpgrade ceph-debuginfoUpgrade python-rgw | Mar 5, 2020 | Jan 15, 2019 |
| Debian | — | Upgrade ceph | Mar 12, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-rbdUpgrade librbd1Upgrade python-radosUpgrade librados2 | Jul 26, 2019 | Jan 15, 2019 |
| Redhat_linux | — | Upgrade libradosstriper1Upgrade ceph-radosgwUpgrade nfs-ganeshaUpgrade libcephfs2Upgrade librgw-develUpgrade ceph-ansibleUpgrade nfs-ganesha-cephUpgrade ceph-baseUpgrade libntirpc-debuginfoUpgrade librgw2Upgrade nfs-ganesha-rgwUpgrade ceph-mdsUpgrade cephmetrics-ansibleUpgrade ceph-debuginfoUpgrade python-rgwUpgrade ceph-selinuxUpgrade librbd-develUpgrade libntirpcUpgrade python-crypto-debuginfoUpgrade ceph-commonUpgrade rbd-mirrorUpgrade librados-develUpgrade ceph-iscsi-configUpgrade libcephfs-develUpgrade nfs-ganesha-debuginfoUpgrade python2-cryptoUpgrade ceph-fuseUpgrade python-cephfs | Mar 5, 2020 | Jan 15, 2019 |
| Suse | — | Upgrade ceph-radosgwUpgrade python-rgwUpgrade librgw2Upgrade python-cephfsUpgrade rbd-fuseUpgrade cephUpgrade ceph-resource-agentsUpgrade ceph-testUpgrade libradosstriper1Upgrade python3-cephfsUpgrade rados-objclass-develUpgrade librados2Upgrade rbd-mirrorUpgrade ceph-fuseUpgrade ceph-osdUpgrade ceph-mdsUpgrade librbd-develUpgrade python3-radosUpgrade python3-rgwUpgrade libcephfs2Upgrade ceph-mgrUpgrade python-rbdUpgrade ceph-monUpgrade python3-rbdUpgrade librgw-develUpgrade ceph-baseUpgrade librados-develUpgrade rbd-nbdUpgrade python-radosUpgrade ceph-commonUpgrade libcephfs-develUpgrade libradosstriper-develUpgrade librbd1 | Feb 27, 2019 | Jan 15, 2019 |
| Ubuntu | — | Upgrade cephUpgrade ceph-common | Jun 25, 2019 | Jan 15, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub