CVE-2016-9579

high-risk

Published 2018-08-01

A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket. A remote unauthenticated attacker could use this flaw to cause denial of service by sending a specially-crafted cross-origin HTTP request. Ceph branches 1.3.x and 2.x are affected.

Do I need to act?

18.0% chance of exploitation in next 30 days

EPSS score — higher than 82% of all CVEs

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 6.5/10 Medium

NETWORK / LOW complexity

Affected Products (9)

Ceph Storage

Ceph Storage Mon

Ceph Storage Osd

Enterprise Linux Desktop

Enterprise Linux Server

Enterprise Linux Workstation

Ceph Storage

Affected Vendors

Redhat

References (14)

Third Party Advisory http://rhn.redhat.com/errata/RHSA-2016-2954.html

Third Party Advisory http://rhn.redhat.com/errata/RHSA-2016-2956.html

Third Party Advisory http://rhn.redhat.com/errata/RHSA-2016-2994.html

Third Party Advisory http://rhn.redhat.com/errata/RHSA-2016-2995.html

Exploit http://tracker.ceph.com/issues/18187

Third Party Advisory http://www.securityfocus.com/bid/94936

Exploit https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9579

Third Party Advisory http://rhn.redhat.com/errata/RHSA-2016-2954.html

Third Party Advisory http://rhn.redhat.com/errata/RHSA-2016-2956.html

Third Party Advisory http://rhn.redhat.com/errata/RHSA-2016-2994.html

Third Party Advisory http://rhn.redhat.com/errata/RHSA-2016-2995.html

Exploit http://tracker.ceph.com/issues/18187

Third Party Advisory http://www.securityfocus.com/bid/94936

Exploit https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9579

/ 100

high-risk

Severity 24/34 · High

Exploitability 13/34 · Low

Exposure 15/34 · Moderate