Lucene search

K
cvelistRedhatCVELIST:CVE-2018-16846
HistoryJan 15, 2019 - 6:00 p.m.

CVE-2018-16846

2019-01-1518:00:00
CWE-770
redhat
www.cve.org
13
ceph
rgw
denial of service
omaps

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.3

Confidence

High

EPSS

0.003

Percentile

71.7%

It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices.

CNA Affected

[
  {
    "product": "ceph",
    "vendor": "[UNKNOWN]",
    "versions": [
      {
        "status": "affected",
        "version": "13.2.4"
      }
    ]
  }
]

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.3

Confidence

High

EPSS

0.003

Percentile

71.7%