Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-8626

Опубликовано: 31 июл. 2018
Источник: nvd
CVSS3: 6.5
CVSS2: 6.8
EPSS Низкий

Описание

A flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object Gateway handles POST object requests permits an authenticated attacker to launch a denial of service attack by sending null or specially crafted POST object requests.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:redhat:ceph:*:*:*:*:*:*:*:*
Версия до 0.94.3.9-8 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 83%
0.0228
Низкий

6.5 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-476
CWE-20

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 8 лет назад

A flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object Gateway handles POST object requests permits an authenticated attacker to launch a denial of service attack by sending null or specially crafted POST object requests.

CVSS3: 6.5
redhat
около 10 лет назад

A flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object Gateway handles POST object requests permits an authenticated attacker to launch a denial of service attack by sending null or specially crafted POST object requests.

CVSS3: 6.5
debian
больше 8 лет назад

A flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object ...

CVSS3: 6.5
github
больше 4 лет назад

A flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object Gateway handles POST object requests permits an authenticated attacker to launch a denial of service attack by sending null or specially crafted POST object requests.

CVSS3: 6.5
altlinux
около 11 лет назад

ALT-PU-2015-1896: package `ceph` update to version 0.94.4-alt1

EPSS

Процентиль: 83%
0.0228
Низкий

6.5 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-476
CWE-20