CVE-2017-16818

RADOS Gateway in Ceph 12.1.0 through 12.2.1 allows remote authenticated users to cause a denial of service (assertion failure and application exit) by…

published December 20, 2017

CVSS
—
EPSS
2%
Percentile
83.2
In the wild
Unconfirmed
What it is

RADOS Gateway in Ceph 12.1.0 through 12.2.1 allows remote authenticated users to cause a denial of service (assertion failure and application exit) by leveraging "full" (not necessarily admin) privileges to post an invalid profile to the admin API, related to rgw/rgw_iam_policy.cc, rgw/rgw_basic_types.h, and rgw/rgw_iam_types.h.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02313 · 83.2th percentile
Published
2017-12-20T17:00Z
EPSS history
Timeline
  • 20 DEC 17:00Z
    RADOS Gateway in Ceph 12.1.0 through 12.2.1 allows remote authenticated users to cause a denial of service (assertion failure and application exit) by…
    cvelistv5