CVE-2018-7262
Fixed in a distro release EPSS 3%
In Ceph before 12.2.3 and 13.x through 13.0.1, the rgw_civetweb.cc RGWCivetWeb::init_env function in radosgw doesn't handle malformed HTTP headers properly, allowing for denial of service.
Products: redhat ceph, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat ceph storage 3 | ceph | 2:12.2.1-46.el7cp |
| Red Hat ceph storage 3 | ceph-base | 2:12.2.1-46.el7cp |
| Red Hat ceph storage 3 | ceph-common | 2:12.2.1-46.el7cp |
| Red Hat ceph storage 3 | ceph-debuginfo | 2:12.2.1-46.el7cp |
| Red Hat ceph storage 3 | ceph-fuse | 2:12.2.1-46.el7cp |
| Red Hat ceph storage 3 | ceph-mds | 2:12.2.1-46.el7cp |
| Red Hat ceph storage 3 | ceph-mgr | 2:12.2.1-46.el7cp |
| Red Hat ceph storage 3 | ceph-mon | 2:12.2.1-46.el7cp |
| Red Hat ceph storage 3 | ceph-osd | 2:12.2.1-46.el7cp |
| Red Hat ceph storage 3 | ceph-radosgw | 2:12.2.1-46.el7cp |
| Red Hat ceph storage 3 | ceph-selinux | 2:12.2.1-46.el7cp |
| Red Hat ceph storage 3 | ceph-test | 2:12.2.1-46.el7cp |
| Red Hat ceph storage 3 | libcephfs-devel | 2:12.2.1-46.el7cp |
| Red Hat ceph storage 3 | libcephfs2 | 2:12.2.1-46.el7cp |
| Red Hat ceph storage 3 | librados-devel | 2:12.2.1-46.el7cp |
| Red Hat ceph storage 3 | librados2 | 2:12.2.1-46.el7cp |
| Red Hat ceph storage 3 | libradosstriper1 | 2:12.2.1-46.el7cp |
| Red Hat ceph storage 3 | librbd-devel | 2:12.2.1-46.el7cp |
| Red Hat ceph storage 3 | librbd1 | 2:12.2.1-46.el7cp |
| Red Hat ceph storage 3 | librgw-devel | 2:12.2.1-46.el7cp |
| Red Hat ceph storage 3 | librgw2 | 2:12.2.1-46.el7cp |
| Red Hat ceph storage 3 | python-cephfs | 2:12.2.1-46.el7cp |
| Red Hat ceph storage 3 | python-rados | 2:12.2.1-46.el7cp |
| Red Hat ceph storage 3 | python-rbd | 2:12.2.1-46.el7cp |
| Red Hat ceph storage 3 | python-rgw | 2:12.2.1-46.el7cp |
| Red Hat ceph storage 3 | rbd-mirror | 2:12.2.1-46.el7cp |
| SUSE Enterprise Storage 4 | ceph | 10.2.11+git.1531487710.3a12911a2e-12.14.2 |
| SUSE Enterprise Storage 4 | ceph-test | 10.2.11+git.1531487710.3a12911a2e-12.14.2 |
| SUSE Enterprise Storage 5 | ceph | 12.2.5+git.1524775272.5e7ea8cf03-2.13.3 |
| SUSE Linux Enterprise Desktop 12 SP3 | ceph | 12.2.5+git.1524775272.5e7ea8cf03-2.7.1 |
| SUSE Linux Enterprise Server 12 SP3 | ceph | 12.2.5+git.1524775272.5e7ea8cf03-2.7.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | ceph | 12.2.5+git.1524775272.5e7ea8cf03-2.7.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | ceph | 12.2.5+git.1524775272.5e7ea8cf03-2.7.1 |