CVE-2019-19337

Published: Dec 23, 2019Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

A flaw was found in Red Hat Ceph Storage version 3 in the way the Ceph RADOS Gateway daemon handles S3 requests. An authenticated attacker can abuse this flaw by causing a remote denial of service by sending a specially crafted HTTP Content-Length header to the Ceph RADOS Gateway server.

Affected (1)

Products: Redhat: Ceph Storage

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Ceph Storage	Version 3.3

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19337

Source: secalert@redhat.com

Issue TrackingMitigationVendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19337

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingMitigationVendor Advisory

Timeline

No history available yet.