CVE-2016-5009
Fixed in a distro release EPSS 2%
The handle_command function in mon/Monitor.cc in Ceph allows remote authenticated users to cause a denial of service (segmentation fault and ceph monitor crash) via an (1) empty or (2) crafted prefix.
Products: redhat ceph_storage_mon, redhat ceph_storage_osd, redhat enterprise_linux_desktop, redhat enterprise_linux_for_scientific_computing, redhat enterprise_linux_server, redhat enterprise_linux_workstation, redhat ceph
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | ceph | 10.2.5-1 |
| Debian 13 | ceph | 10.2.5-1 |
| Debian 14 | ceph | 10.2.5-1 |
| Red Hat ceph storage 1.3 | ceph | 1:0.94.5-14.el7cp |
| Red Hat ceph storage 1.3 | ceph-common | 1:0.94.5-14.el7cp |
| Red Hat ceph storage 1.3 | ceph-debuginfo | 1:0.94.5-14.el7cp |
| Red Hat ceph storage 1.3 | ceph-mon | 1:0.94.5-14.el7cp |
| Red Hat ceph storage 1.3 | ceph-osd | 1:0.94.5-14.el7cp |
| Red Hat ceph storage 1.3 | ceph-radosgw | 1:0.94.5-14.el7cp |
| Red Hat ceph storage 1.3 | ceph-selinux | 1:0.94.5-14.el7cp |
| Red Hat ceph storage 1.3 | ceph-test | 1:0.94.5-14.el7cp |
| Red Hat ceph storage 1.3 | librados2 | 1:0.94.5-14.el7cp |
| Red Hat ceph storage 1.3 | librados2-devel | 1:0.94.5-14.el7cp |
| Red Hat ceph storage 1.3 | librbd1 | 1:0.94.5-14.el7cp |
| Red Hat ceph storage 1.3 | librbd1-devel | 1:0.94.5-14.el7cp |
| Red Hat ceph storage 1.3 | python-rados | 1:0.94.5-14.el7cp |
| Red Hat ceph storage 1.3 | python-rbd | 1:0.94.5-14.el7cp |
| SUSE Enterprise Storage 3 | ceph | 10.2.3+git.1475228057.755cf99-7.3 |
| SUSE Linux Enterprise Desktop 12 SP2 | ceph | 10.2.4+git.1481215985.12b091b-16.2 |
| SUSE Linux Enterprise Server 12 SP2 | ceph | 10.2.4+git.1481215985.12b091b-16.2 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | ceph | 10.2.4+git.1481215985.12b091b-16.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | ceph | 10.2.4+git.1481215985.12b091b-16.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | ceph | 10.2.4+git.1481215985.12b091b-16.2 |
| Ubuntu 14.04 LTS | ceph | 0.80.11-0ubuntu1.14.04.3 |