A flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object Gateway handles POST object requests permits an authenticated attacker to launch a denial of service attack by sending null or specially crafted POST object requests.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ceph | Jul 30, 2024 | Jul 31, 2018 |
| Redhat_linux | — | Upgrade nfs-ganesha-rgwUpgrade ceph-mdsUpgrade libcephfs1-develUpgrade nfs-ganeshaUpgrade librgw2-develUpgrade ceph-commonUpgrade python-rbdUpgrade ceph-baseUpgrade libcephfs1Upgrade nfs-ganesha-debuginfoUpgrade librgw2Upgrade libntirpcUpgrade rbd-mirrorUpgrade ceph-debuginfoUpgrade ceph-fuseUpgrade python-radosUpgrade libntirpc-debuginfoUpgrade ceph-iscsi-configUpgrade ceph-selinuxUpgrade ceph-radosgwUpgrade python-cephfsUpgrade ceph-deployUpgrade ceph-iscsi-tools | Nov 23, 2016 | Nov 22, 2016 |
| Suse | — | Upgrade librbd1-develUpgrade libradosstriper1-develUpgrade libradosstriper1-debuginfoUpgrade python-ceph-compatUpgrade librbd1Upgrade libradosstriper1Upgrade librados2-develUpgrade ceph-common-debuginfoUpgrade python-cephfsUpgrade librados2Upgrade libcephfs1-develUpgrade cephUpgrade ceph-commonUpgrade ceph-debuginfoUpgrade python-rbdUpgrade ceph-devel-compatUpgrade librbd1-debuginfoUpgrade ceph-debugsourceUpgrade librados2-debuginfoUpgrade python-radosUpgrade libcephfs1Upgrade libcephfs1-debuginfo | May 22, 2017 | Nov 22, 2016 |
| Ubuntu | — | Upgrade cephUpgrade ceph-common | Oct 11, 2017 | Nov 22, 2016 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub