Memory corruption in Ceph - CVE-2018-16846
Published: January 21, 2019
Vulnerability identifier: #VU17097
CSH Severity: Low
CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-16846
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote authenticated attacker to perform a denial of service (DoS) attack.
The vulnerability exists in the RADOS Gateway (RGW) code base due to boundary error in the ListBucket max-keys function during bucket listing operations. A remote attacker with Ceph RGW user permissions can trigger memory corruption and perform a denial of service attack against object maps (OMAPs) holding bucket indexes.
Affected software
Ceph
Red Hat Ceph Storage
Opensuse
Fedora
ceph
Red Hat Ceph Storage
Opensuse
Fedora
ceph
How to mitigate CVE-2018-16846
Update to version 13.2.4.
Ceph - update to 13.2.4
ceph - update to 12.2.11-1.fc29
ceph - update to 12.2.11-1.fc29