CVE-2017-16818
Fixed in a distro release EPSS 2%
RADOS Gateway in Ceph 12.1.0 through 12.2.1 allows remote authenticated users to cause a denial of service (assertion failure and application exit) by leveraging "full" (not necessarily admin) privileges to post an invalid profile to the admin API, related to rgw/rgw_iam_policy.cc, rgw/rgw_basic_types.h, and rgw/rgw_iam_types.h.
Products: redhat ceph, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise Desktop 12 SP3 | ceph | 12.2.5+git.1524775272.5e7ea8cf03-2.7.1 |
| SUSE Linux Enterprise Server 12 SP3 | ceph | 12.2.5+git.1524775272.5e7ea8cf03-2.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | ceph | 12.2.5+git.1524775272.5e7ea8cf03-2.7.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | ceph | 12.2.5+git.1524775272.5e7ea8cf03-2.7.1 |