CVE-2019-3821CWE-772

A flaw was found in the way civetweb frontend was handling requests for ceph RGW server with SSL enabled

High · published March 27, 2019

CVSS v3.0
7.5
EPSS
3%
Percentile
87.1
In the wild
Unconfirmed
What it is

A flaw was found in the way civetweb frontend was handling requests for ceph RGW server with SSL enabled. An unauthenticated attacker could create multiple connections to ceph RADOS gateway to exhaust file descriptors for ceph-radosgw service resulting in a remote denial of service.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.02946 · 87.1th percentile
Weakness
CWE-772 · Missing Release of Resource after Effective Lifetime
Published
2019-03-27T12:22Z
EPSS history
Timeline
  • 27 MAR 12:22Z
    A flaw was found in the way civetweb frontend was handling requests for ceph RGW server with SSL enabled
    cvelistv5