It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nfs-ganeshaUpgrade ceph-mdsUpgrade cephmetrics-ansibleUpgrade ceph-baseUpgrade ceph-commonUpgrade nfs-ganesha-rgwUpgrade rbd-mirrorUpgrade libcephfs2Upgrade librados-develUpgrade librgw-develUpgrade nfs-ganesha-debuginfoUpgrade librgw2Upgrade ceph-debuginfoUpgrade python-cephfsUpgrade ceph-radosgwUpgrade python2-cryptoUpgrade ceph-ansibleUpgrade libradosstriper1Upgrade nfs-ganesha-cephUpgrade libcephfs-develUpgrade ceph-fuseUpgrade ceph-selinuxUpgrade librbd-develUpgrade libntirpcUpgrade python-rgwUpgrade ceph-iscsi-configUpgrade python-crypto-debuginfoUpgrade libntirpc-debuginfo | Mar 5, 2020 | Jan 15, 2019 |
| Debian | — | Upgrade ceph | Mar 12, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-rbdUpgrade librbd1Upgrade librados2Upgrade python-rados | Jul 26, 2019 | Jan 15, 2019 |
| Redhat_linux | — | Upgrade ceph-fuseUpgrade ceph-selinuxUpgrade cephmetrics-ansibleUpgrade nfs-ganesha-debuginfoUpgrade python-crypto-debuginfoUpgrade python-cephfsUpgrade ceph-debuginfoUpgrade librbd-develUpgrade ceph-commonUpgrade rbd-mirrorUpgrade librados-develUpgrade python-rgwUpgrade libntirpcUpgrade python2-cryptoUpgrade libcephfs-develUpgrade ceph-iscsi-configUpgrade nfs-ganeshaUpgrade nfs-ganesha-cephUpgrade nfs-ganesha-rgwUpgrade ceph-radosgwUpgrade ceph-baseUpgrade librgw2Upgrade libcephfs2Upgrade libradosstriper1Upgrade librgw-develUpgrade ceph-mdsUpgrade libntirpc-debuginfoUpgrade ceph-ansible | Mar 5, 2020 | Jan 15, 2019 |
| Suse | — | Upgrade ceph-osdUpgrade rbd-mirrorUpgrade python-rgwUpgrade ceph-radosgwUpgrade librbd-develUpgrade ceph-fuseUpgrade ceph-mdsUpgrade librados2Upgrade ceph-testUpgrade rbd-fuseUpgrade librgw2Upgrade python-cephfsUpgrade libradosstriper1Upgrade python3-cephfsUpgrade cephUpgrade ceph-resource-agentsUpgrade python3-radosUpgrade python3-rgwUpgrade rados-objclass-develUpgrade rbd-nbdUpgrade python-radosUpgrade ceph-baseUpgrade librados-develUpgrade python3-rbdUpgrade ceph-monUpgrade libcephfs2Upgrade libradosstriper-develUpgrade librbd1Upgrade libcephfs-develUpgrade ceph-mgrUpgrade python-rbdUpgrade librgw-develUpgrade ceph-common | Feb 27, 2019 | Jan 15, 2019 |
| Ubuntu | — | Upgrade cephUpgrade ceph-common | Jun 25, 2019 | Jan 15, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub