CVE-2019-10222CWE-755

A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests

High · published November 8, 2019

CVSS v3.0
7.5
EPSS
4%
Percentile
91.4
In the wild
Unconfirmed
What it is

A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph RGW server by sending valid HTTP headers and terminating the connection, resulting in a remote denial of service for Ceph RGW clients.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.04486 · 91.4th percentile
Weakness
CWE-755 · Improper Handling of Exceptional Conditions
Published
2019-11-08T14:45Z
EPSS history
Timeline
  • 08 NOV 14:45Z
    A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests
    cvelistv5