Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-8626

Опубликовано: 31 июл. 2018
Источник: nvd
CVSS3: 6.5
CVSS2: 6.8
EPSS Низкий

Описание

A flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object Gateway handles POST object requests permits an authenticated attacker to launch a denial of service attack by sending null or specially crafted POST object requests.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:redhat:ceph:*:*:*:*:*:*:*:*
Версия до 0.94.3.9-8 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 86%
0.02873
Низкий

6.5 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-476
CWE-20

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 7 лет назад

A flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object Gateway handles POST object requests permits an authenticated attacker to launch a denial of service attack by sending null or specially crafted POST object requests.

CVSS3: 6.5
redhat
больше 9 лет назад

A flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object Gateway handles POST object requests permits an authenticated attacker to launch a denial of service attack by sending null or specially crafted POST object requests.

CVSS3: 6.5
debian
больше 7 лет назад

A flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object ...

CVSS3: 6.5
github
больше 3 лет назад

A flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object Gateway handles POST object requests permits an authenticated attacker to launch a denial of service attack by sending null or specially crafted POST object requests.

EPSS

Процентиль: 86%
0.02873
Низкий

6.5 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-476
CWE-20