CVE-2019-10222
First published: Fri Nov 08 2019(Updated: )
A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph RGW server by sending valid HTTP headers and terminating the connection, resulting in a remote denial of service for Ceph RGW clients.
Credit: secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ceph Ceph | ||
| Redhat Ceph Storage | =3.0 | |
| Redhat Ceph Storage | =3.3 | |
| Fedoraproject Fedora | =30 | |
| Fedoraproject Fedora | =31 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-10222?
CVE-2019-10222 is a vulnerability in the Ceph RGW configuration with Beast as the front end handling client requests.
What is the severity of CVE-2019-10222?
CVE-2019-10222 has a severity level of 7.5 (high).
How does CVE-2019-10222 affect Ceph and Red Hat Ceph Storage?
CVE-2019-10222 affects Ceph and Red Hat Ceph Storage versions 3.0 and 3.3.
How can an unauthenticated attacker exploit CVE-2019-10222?
An unauthenticated attacker can crash the Ceph RGW server by sending valid HTTP headers and terminating the connection.
How can CVE-2019-10222 be fixed?
Apply the necessary updates or patches provided by the vendor to mitigate the vulnerability in Ceph RGW.
- collector/mitre-cve
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/type
- agent/event
- agent/description
- agent/remedy
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- vendor/ceph
- canonical/ceph ceph
- vendor/redhat
- canonical/redhat ceph storage
- version/redhat ceph storage/3.0
- version/redhat ceph storage/3.3
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/30
- version/fedoraproject fedora/31