6.5
Medium
CVE-2018-16846 It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against…
Description
It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ceph | 13.2.4 | No fix stated |
Other CVEs of ceph
The 7 CVEs of ceph →
CVE-2020-10736
An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr…
8.0
High
CVE-2020-1760
A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3
5.8
Medium
CVE-2020-1700
A flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects
6.5
Medium
CVE-2019-3821
A flaw was found in the way civetweb frontend was handling requests for ceph RGW server with SSL enabled
7.5
High