5 matches found
CVE-2018-7262
In Ceph before 12.2.3 and 13.x through 13.0.1, the rgwcivetweb.cc RGWCivetWeb::initenv function in radosgw doesn't handle malformed HTTP headers properly, allowing for denial of service...
7.5CVSS7.4AI score0.02924EPSS
SaveExploits0References6
Design/Logic Flaw
In Ceph before 12.2.3 and 13.x through 13.0.1, the rgwcivetweb.cc RGWCivetWeb::initenv function in radosgw doesn't handle malformed HTTP headers properly, allowing for denial of service...
5CVSS7.3AI score0.02924EPSS
SaveExploits0References6Affected Software2
CVE-2018-7262
CVE-2018-7262 affects Ceph RGW (rgw_civetweb.cc RGWCivetWeb::init_env) where malformed HTTP headers can crash radosgw, enabling denial of service. Affected ranges in the initial entry are Ceph releases before 12.2.3 and 13.x up to 13.0.1. Public disclosures in connected docs corroborate that the ...
7.5CVSS7.3AI score0.02924EPSS
SaveExploits0References6Affected Software1
20