A flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object Gateway handles POST object requests permits an authenticated attacker to launch a denial of service attack by sending null or specially crafted POST object requests.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ceph | Jul 30, 2024 | Jul 31, 2018 |
| Redhat_linux | — | Upgrade ceph-iscsi-configUpgrade rbd-mirrorUpgrade python-cephfsUpgrade ceph-fuseUpgrade python-radosUpgrade ceph-deployUpgrade ceph-debuginfoUpgrade libntirpcUpgrade ceph-radosgwUpgrade libntirpc-debuginfoUpgrade ceph-iscsi-toolsUpgrade ceph-selinuxUpgrade python-rbdUpgrade libcephfs1Upgrade nfs-ganesha-rgwUpgrade nfs-ganesha-debuginfoUpgrade libcephfs1-develUpgrade ceph-commonUpgrade ceph-mdsUpgrade librgw2-develUpgrade ceph-baseUpgrade nfs-ganeshaUpgrade librgw2 | Nov 23, 2016 | Nov 22, 2016 |
| Suse | — | Upgrade ceph-devel-compatUpgrade libcephfs1Upgrade librbd1-debuginfoUpgrade ceph-debugsourceUpgrade librados2-debuginfoUpgrade libcephfs1-debuginfoUpgrade python-radosUpgrade ceph-common-debuginfoUpgrade librados2-develUpgrade ceph-commonUpgrade ceph-debuginfoUpgrade libradosstriper1Upgrade python-rbdUpgrade python-cephfsUpgrade librados2Upgrade librbd1-develUpgrade libradosstriper1-develUpgrade libradosstriper1-debuginfoUpgrade libcephfs1-develUpgrade librbd1Upgrade python-ceph-compatUpgrade ceph | May 22, 2017 | Nov 22, 2016 |
| Ubuntu | — | Upgrade cephUpgrade ceph-common | Oct 11, 2017 | Nov 22, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub