Name: CVE-2018-16846: Allocation of Resources Without Limits or Throttling
Creator: Rapid7
Published: 2019-01-15T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2018-16846, CWE-770, CVSS 6.5, EPSS 0.02136

It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices.

CVSS Details

CVSS 3.1 Base Score: 6.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade ceph-baseUpgrade librgw2Upgrade nfs-ganesha-rgwUpgrade ceph-mdsUpgrade librados-develUpgrade rbd-mirrorUpgrade cephmetrics-ansibleUpgrade libcephfs2Upgrade nfs-ganeshaUpgrade nfs-ganesha-debuginfoUpgrade librgw-develUpgrade ceph-commonUpgrade ceph-selinuxUpgrade ceph-fuseUpgrade libntirpcUpgrade ceph-iscsi-configUpgrade ceph-ansibleUpgrade python-cephfsUpgrade python-rgwUpgrade python2-cryptoUpgrade librbd-develUpgrade libcephfs-develUpgrade libntirpc-debuginfoUpgrade ceph-debuginfoUpgrade ceph-radosgwUpgrade python-crypto-debuginfoUpgrade nfs-ganesha-cephUpgrade libradosstriper1	Mar 5, 2020	Jan 15, 2019
Debian	—	Upgrade ceph	Mar 12, 2019	Jan 15, 2019
Huawei Euleros 2_0_sp8	—	Upgrade librados2Upgrade python-radosUpgrade librbd1Upgrade python-rbd	Jul 26, 2019	Jan 15, 2019
Redhat_linux	—	Upgrade libcephfs-develUpgrade nfs-ganesha-debuginfoUpgrade python2-cryptoUpgrade ceph-commonUpgrade ceph-selinuxUpgrade cephmetrics-ansibleUpgrade python-cephfsUpgrade python-crypto-debuginfoUpgrade librbd-develUpgrade rbd-mirrorUpgrade ceph-debuginfoUpgrade python-rgwUpgrade ceph-fuseUpgrade ceph-iscsi-configUpgrade librados-develUpgrade libntirpcUpgrade ceph-ansibleUpgrade libntirpc-debuginfoUpgrade librgw2Upgrade librgw-develUpgrade nfs-ganeshaUpgrade nfs-ganesha-cephUpgrade ceph-baseUpgrade ceph-radosgwUpgrade nfs-ganesha-rgwUpgrade libradosstriper1Upgrade ceph-mdsUpgrade libcephfs2	Mar 5, 2020	Jan 15, 2019
Suse	—	Upgrade libcephfs2Upgrade ceph-mgrUpgrade python-rbdUpgrade librgw-develUpgrade librbd1Upgrade ceph-commonUpgrade ceph-monUpgrade rbd-nbdUpgrade libradosstriper-develUpgrade libcephfs-develUpgrade python3-rbdUpgrade python-radosUpgrade librados-develUpgrade ceph-baseUpgrade cephUpgrade python3-rgwUpgrade librgw2Upgrade rados-objclass-develUpgrade ceph-osdUpgrade libradosstriper1Upgrade ceph-mdsUpgrade ceph-fuseUpgrade rbd-fuseUpgrade rbd-mirrorUpgrade python-rgwUpgrade ceph-radosgwUpgrade librados2Upgrade ceph-testUpgrade python-cephfsUpgrade librbd-develUpgrade python3-cephfsUpgrade python3-radosUpgrade ceph-resource-agents	Feb 27, 2019	Jan 15, 2019
Ubuntu	—	Upgrade cephUpgrade ceph-common	Jun 25, 2019	Jan 15, 2019
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jan 20, 2025	Jan 15, 2019

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence