Описание
The handle_command function in mon/Monitor.cc in Ceph allows remote authenticated users to cause a denial of service (segmentation fault and ceph monitor crash) via an (1) empty or (2) crafted prefix.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:redhat:ceph_storage_mon:1.3:*:*:*:*:*:*:*
cpe:2.3:a:redhat:ceph_storage_osd:1.3:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
Конфигурация 2Версия до 0.94.6 (включая)
cpe:2.3:a:redhat:ceph:*:*:*:*:*:*:*:*
EPSS
Процентиль: 80%
0.01361
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 6.5
ubuntu
больше 9 лет назад
The handle_command function in mon/Monitor.cc in Ceph allows remote authenticated users to cause a denial of service (segmentation fault and ceph monitor crash) via an (1) empty or (2) crafted prefix.
CVSS3: 4.9
redhat
больше 9 лет назад
The handle_command function in mon/Monitor.cc in Ceph allows remote authenticated users to cause a denial of service (segmentation fault and ceph monitor crash) via an (1) empty or (2) crafted prefix.
CVSS3: 6.5
debian
больше 9 лет назад
The handle_command function in mon/Monitor.cc in Ceph allows remote au ...
EPSS
Процентиль: 80%
0.01361
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-20