vulnerability

CentOS Linux: CVE-2019-19337: Moderate: Red Hat Ceph Storage security, bug fix, and enhancement update (CESA-2019:4353)

Severity
4
CVSS
(AV:N/AC:L/Au:S/C:N/I:N/A:P)
Published
Dec 23, 2019
Added
Mar 2, 2020
Modified
May 25, 2023

Description

A flaw was found in Red Hat Ceph Storage version 3 in the way the Ceph RADOS Gateway daemon handles S3 requests. An authenticated attacker can abuse this flaw by causing a remote denial of service by sending a specially crafted HTTP Content-Length header to the Ceph RADOS Gateway server.

Solutions

centos-upgrade-ceph-ansiblecentos-upgrade-ceph-basecentos-upgrade-ceph-commoncentos-upgrade-ceph-debuginfocentos-upgrade-ceph-fusecentos-upgrade-ceph-mdscentos-upgrade-ceph-radosgwcentos-upgrade-ceph-selinuxcentos-upgrade-cephmetrics-ansiblecentos-upgrade-libcephfs-develcentos-upgrade-libcephfs2centos-upgrade-librados-develcentos-upgrade-libradosstriper1centos-upgrade-librbd-develcentos-upgrade-librgw-develcentos-upgrade-librgw2centos-upgrade-python-cephfscentos-upgrade-python-rgwcentos-upgrade-rbd-mirror
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.