It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rbd-mirrorUpgrade librados-develUpgrade librgw2Upgrade nfs-ganesha-debuginfoUpgrade ceph-baseUpgrade nfs-ganesha-rgwUpgrade librgw-develUpgrade libcephfs2Upgrade cephmetrics-ansibleUpgrade ceph-mdsUpgrade ceph-commonUpgrade nfs-ganeshaUpgrade libntirpc-debuginfoUpgrade python-crypto-debuginfoUpgrade libcephfs-develUpgrade librbd-develUpgrade ceph-selinuxUpgrade python-cephfsUpgrade ceph-fuseUpgrade ceph-radosgwUpgrade ceph-iscsi-configUpgrade libradosstriper1Upgrade ceph-ansibleUpgrade libntirpcUpgrade nfs-ganesha-cephUpgrade python2-cryptoUpgrade ceph-debuginfoUpgrade python-rgw | Mar 5, 2020 | Jan 15, 2019 |
| Debian | — | Upgrade ceph | Mar 12, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-rbdUpgrade librbd1Upgrade python-radosUpgrade librados2 | Jul 26, 2019 | Jan 15, 2019 |
| Redhat_linux | — | Upgrade python-rgwUpgrade libcephfs-develUpgrade librbd-develUpgrade ceph-iscsi-configUpgrade cephmetrics-ansibleUpgrade librados-develUpgrade ceph-commonUpgrade rbd-mirrorUpgrade libntirpcUpgrade nfs-ganesha-debuginfoUpgrade ceph-fuseUpgrade python-crypto-debuginfoUpgrade ceph-selinuxUpgrade python-cephfsUpgrade ceph-debuginfoUpgrade python2-cryptoUpgrade ceph-radosgwUpgrade libcephfs2Upgrade nfs-ganeshaUpgrade librgw-develUpgrade ceph-ansibleUpgrade nfs-ganesha-rgwUpgrade ceph-mdsUpgrade ceph-baseUpgrade libntirpc-debuginfoUpgrade libradosstriper1Upgrade nfs-ganesha-cephUpgrade librgw2 | Mar 5, 2020 | Jan 15, 2019 |
| Suse | — | Upgrade libcephfs2Upgrade librbd1Upgrade libradosstriper-develUpgrade python-radosUpgrade ceph-monUpgrade libcephfs-develUpgrade rbd-nbdUpgrade librgw-develUpgrade ceph-commonUpgrade python-rbdUpgrade librados-develUpgrade python3-rbdUpgrade ceph-baseUpgrade ceph-mgrUpgrade rbd-mirrorUpgrade librgw2Upgrade ceph-radosgwUpgrade python-cephfsUpgrade libradosstriper1Upgrade python3-cephfsUpgrade librbd-develUpgrade python3-rgwUpgrade python3-radosUpgrade rados-objclass-develUpgrade ceph-resource-agentsUpgrade cephUpgrade ceph-fuseUpgrade ceph-testUpgrade ceph-osdUpgrade python-rgwUpgrade ceph-mdsUpgrade rbd-fuseUpgrade librados2 | Feb 27, 2019 | Jan 15, 2019 |
| Ubuntu | — | Upgrade ceph-commonUpgrade ceph | Jun 25, 2019 | Jan 15, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub