Every CVE Search/ Get API key

CVE-2016-9579

A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the...

6.5 MediumFix available

CVE-2016-9579 is a medium vulnerability (CVSS 6.5) in Ceph, published December 12, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.34%, the 91st percentile. Fixed in ceph 10.2.5-2.

A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket. A remote unauthenticated attacker could use this flaw to cause denial of service by sending a specially-crafted cross-origin HTTP request. Ceph branches 1.3.x and 2.x are affected.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

4.34%Up 3.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

CVE List Score used 6.5

A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket. A remote unauthenticated attacker could use this flaw to cause denial of service by sending a specially-crafted cross-origin HTTP request. Ceph branches 1.3.x and 2.x are affected.

Record
CVE-2016-9579
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-20
Updated
2026-11-02
EUVDEUVD-2016-10385 6.5

A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket. A remote unauthenticated attacker could use this flaw to cause denial of service by sending a specially-crafted cross-origin HTTP request. Ceph branches 1.3.x and 2.x are affected.

Record
EUVD-2016-10385
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-2594-xrq4-4jm3 7.5

A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the...

A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket. A remote unauthenticated attacker could use this flaw to cause denial of service by sending a specially-crafted cross-origin HTTP request. Ceph branches 1.3.x and 2.x are affected.

Record
GHSA-2594-xrq4-4jm3
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-20
Updated
2026-11-02
NVD 6.5

A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket. A remote unauthenticated attacker could use this flaw to cause denial of service by sending a specially-crafted cross-origin HTTP request. Ceph branches 1.3.x and 2.x are affected.

Record
CVE-2016-9579
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
OSV 7.5

A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket. A remote unauthenticated attacker could use this flaw to cause denial of service by sending a specially-crafted cross-origin HTTP request. Ceph branches 1.3.x and 2.x are affected.

Record
CVE-2016-9579
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2016-9579 7.5

A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket. A remote unauthenticated attacker could use this flaw to cause denial of service by sending a specially-crafted cross-origin HTTP request. Ceph branches 1.3.x and 2.x are affected.

Record
DEBIAN-CVE-2016-9579
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 6 moreShow less
OSVRHSA-2016:2954 6.5

Red Hat Security Advisory: Red Hat Ceph Storage 2.1 security and bug fix update

Record
RHSA-2016:2954
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2016:2994 6.5

Red Hat Security Advisory: Red Hat Ceph Storage 1.3 security update

Record
RHSA-2016:2994
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2016-9579 7.5

A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket. A remote unauthenticated attacker could use this flaw to cause denial of service by sending a specially-crafted cross-origin HTTP request. Ceph branches 1.3.x and 2.x are affected.

Record
UBUNTU-CVE-2016-9579
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVSUSE-SU-2017:1479-1 No score

Security update for ceph

This update provides Ceph 10.2.6, which brings fixes and enhancements:

This security issue was fixed:

  • CVE-2016-9579: Do not abort RGW server when accepting a CORS request with short origin. (bsc#1014986)

These non-security issues were fixed:

  • common: Add rdbmap to ceph-common. (bsc#1029482)
  • tools/rados: Default to include clone objects when executing 'cache-flush-evict-all'. (bsc#1003891)
  • mon, ceph-disk: Add lockbox permissions to bootstrap-osd. (bsc#1008435)
  • ceph_volume_client: Fix _recover_auth_meta() method. (bsc#1008501)
  • systemd/ceph-disk: Reduce ceph-disk flock contention. (bsc#1012100)
  • doc: Add verbiage to rbdmap manpage. (bsc#1015748)
  • doc: Add Install section to systemd rbdmap.service file. (bsc#1015748)
  • doc: Remove references to mds destroy from ceph-deploy man page. (bsc#970642)
Record
SUSE-SU-2017:1479-1
Updated
2026-11-02
OSVSUSE-SU-2017:3171-1 No score

Security update for ceph

This update provides Ceph 10.2.10, which brings fixes and enhancements:

This security issue was fixed:

  • CVE-2017-7519: libradosstriper processes arbitrary printf placeholders in user input. (bsc#1043767)
  • CVE-2016-9579: Do not abort RGW server when accepting a CORS request with short origin. (bsc#1014986)

These non-security issues were fixed:

  • common: Add rdbmap to ceph-common. (bsc#1029482)
  • tools/rados: Default to include clone objects when executing 'cache-flush-evict-all'. (bsc#1003891)
  • mon, ceph-disk: Add lockbox permissions to bootstrap-osd. (bsc#1008435)
  • ceph_volume_client: Fix _recover_auth_meta() method. (bsc#1008501)
  • systemd/ceph-disk: Reduce ceph-disk flock contention. (bsc#1012100)
  • doc: Add verbiage to rbdmap manpage. (bsc#1015748)
  • doc: Add Install section to systemd rbdmap.service file. (bsc#1015748)
  • ceph systemd dependencies are wrong (bsc#1042973)
  • ceph-disk omits '--runtime' when enabling ceph-osd units (was: ERROR: unable to open OSD superblock) (bsc#1051598)
  • SES4: 23 osd's are down after patching node. (bsc#1056536)
  • Invalid error code returned by MDS is causing a kernel client WARNING (bsc#1028109)
  • systemctl stop rbdmap unmaps ALL rbds and not just the ones in /etc/ceph/rbdmap (bsc#1024691)
  • documentation: man crushtool does not cover the '--show-mappings' parameter (bsc#1033786)
  • swift | This returns with HTTP/1.1 401 Unauthorized (bsc#1015371)
  • OSDs fail to start after server reboot (bsc#1025643)
  • 'ceph-deploy mds destroy' not implemented (bsc#970642)
Record
SUSE-SU-2017:3171-1
Updated
2026-11-02
OSVUSN-3452-1 No score

ceph vulnerabilities

It was discovered that Ceph incorrectly handled the handle_command function. A remote authenticated user could use this issue to cause Ceph to crash, resulting in a denial of service. (CVE-2016-5009)

Rahul Aggarwal discovered that Ceph incorrectly handled the authenticated-read ACL. A remote attacker could possibly use this issue to list bucket contents via a URL. (CVE-2016-7031)

Diluga Salome discovered that Ceph incorrectly handled certain POST objects with null conditions. A remote attacker could possibly use this issue to cuase Ceph to crash, resulting in a denial of service. (CVE-2016-8626)

Yang Liu discovered that Ceph incorrectly handled invalid HTTP Origin headers. A remote attacker could possibly use this issue to cuase Ceph to crash, resulting in a denial of service. (CVE-2016-9579)

Record
USN-3452-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ceph
Debian:12
 before 10.2.5-2
10.2.5-2
ceph
Debian:13
 before 10.2.5-2
10.2.5-2
ceph
Debian:14
 before 10.2.5-2
10.2.5-2
ceph
Red Hat:ceph_storage:2::el7
 before 1:10.2.3-17.el7cp
1:10.2.3-17.el7cp
ceph-base
Red Hat:ceph_storage:2::el7
 before 1:10.2.3-17.el7cp
1:10.2.3-17.el7cp
ceph-common
Red Hat:ceph_storage:2::el7
 before 1:10.2.3-17.el7cp
1:10.2.3-17.el7cp
ceph-debuginfo
Red Hat:ceph_storage:2::el7
 before 1:10.2.3-17.el7cp
1:10.2.3-17.el7cp
ceph-fuse
Red Hat:ceph_storage:2::el7
 before 1:10.2.3-17.el7cp
1:10.2.3-17.el7cp
ceph-mds
Red Hat:ceph_storage:2::el7
 before 1:10.2.3-17.el7cp
1:10.2.3-17.el7cp
ceph-radosgw
Red Hat:ceph_storage:2::el7
 before 1:10.2.3-17.el7cp
1:10.2.3-17.el7cp
Show 35 moreShow less
Affected packages
PackageAffectedFixed
ceph-selinux
Red Hat:ceph_storage:2::el7
 before 1:10.2.3-17.el7cp
1:10.2.3-17.el7cp
libcephfs1
Red Hat:ceph_storage:2::el7
 before 1:10.2.3-17.el7cp
1:10.2.3-17.el7cp
libcephfs1-devel
Red Hat:ceph_storage:2::el7
 before 1:10.2.3-17.el7cp
1:10.2.3-17.el7cp
librados2
Red Hat:ceph_storage:2::el7
 before 1:10.2.3-17.el7cp
1:10.2.3-17.el7cp
librados2-devel
Red Hat:ceph_storage:2::el7
 before 1:10.2.3-17.el7cp
1:10.2.3-17.el7cp
librbd1
Red Hat:ceph_storage:2::el7
 before 1:10.2.3-17.el7cp
1:10.2.3-17.el7cp
librbd1-devel
Red Hat:ceph_storage:2::el7
 before 1:10.2.3-17.el7cp
1:10.2.3-17.el7cp
librgw2
Red Hat:ceph_storage:2::el7
 before 1:10.2.3-17.el7cp
1:10.2.3-17.el7cp
librgw2-devel
Red Hat:ceph_storage:2::el7
 before 1:10.2.3-17.el7cp
1:10.2.3-17.el7cp
python-cephfs
Red Hat:ceph_storage:2::el7
 before 1:10.2.3-17.el7cp
1:10.2.3-17.el7cp
python-rados
Red Hat:ceph_storage:2::el7
 before 1:10.2.3-17.el7cp
1:10.2.3-17.el7cp
python-rbd
Red Hat:ceph_storage:2::el7
 before 1:10.2.3-17.el7cp
1:10.2.3-17.el7cp
rbd-mirror
Red Hat:ceph_storage:2::el7
 before 1:10.2.3-17.el7cp
1:10.2.3-17.el7cp
ceph-mon
Red Hat:ceph_storage:2::el7
 before 1:10.2.3-17.el7cp
1:10.2.3-17.el7cp
ceph-test
Red Hat:ceph_storage:2::el7
 before 1:10.2.3-17.el7cp
1:10.2.3-17.el7cp
ceph-osd
Red Hat:ceph_storage:2::el7
 before 1:10.2.3-17.el7cp
1:10.2.3-17.el7cp
ceph
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-9.el7cp
1:0.94.9-9.el7cp
ceph-common
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-9.el7cp
1:0.94.9-9.el7cp
ceph-debuginfo
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-9.el7cp
1:0.94.9-9.el7cp
ceph-radosgw
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-9.el7cp
1:0.94.9-9.el7cp
ceph-selinux
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-9.el7cp
1:0.94.9-9.el7cp
librados2
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-9.el7cp
1:0.94.9-9.el7cp
librados2-devel
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-9.el7cp
1:0.94.9-9.el7cp
librbd1
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-9.el7cp
1:0.94.9-9.el7cp
librbd1-devel
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-9.el7cp
1:0.94.9-9.el7cp
python-rados
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-9.el7cp
1:0.94.9-9.el7cp
python-rbd
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-9.el7cp
1:0.94.9-9.el7cp
ceph-mon
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-9.el7cp
1:0.94.9-9.el7cp
ceph-test
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-9.el7cp
1:0.94.9-9.el7cp
ceph-osd
Red Hat:ceph_storage:1.3::el7
 before 1:0.94.9-9.el7cp
1:0.94.9-9.el7cp
ceph
SUSE:Enterprise Storage 4
 before 10.2.6+git.1490339825.57146d8-11.7
10.2.6+git.1490339825.57146d8-11.7
ceph-test
SUSE:Enterprise Storage 4
 before 10.2.6+git.1490339825.57146d8-11.7
10.2.6+git.1490339825.57146d8-11.7
ceph
SUSE:Enterprise Storage 3
 before 10.2.10+git.1510313171.6d5f0aeac1-13.7.3
10.2.10+git.1510313171.6d5f0aeac1-13.7.3
ceph-test
SUSE:Enterprise Storage 3
 before 10.2.10+git.1510313171.6d5f0aeac1-13.7.2
10.2.10+git.1510313171.6d5f0aeac1-13.7.2
ceph
Ubuntu:14.04:LTS
 before 0.80.11-0ubuntu1.14.04.3, plus listed versions
0.67.4-0ubuntu20.67.4-0ubuntu30.72-0ubuntu10.72.1-0ubuntu10.72.1-2
Show 16 moreShow less
0.72.1-30.72.2-10.72.2-20.78-0ubuntu10.79-0ubuntu10.80.1-0ubuntu10.80.1-0ubuntu1.10.80.5-0ubuntu0.14.04.10.80.7-0ubuntu0.14.04.10.80.9-0ubuntu0.14.04.10.80.9-0ubuntu0.14.04.20.80.10-0ubuntu0.14.04.10.80.10-0ubuntu1.14.04.20.80.10-0ubuntu1.14.04.30.80.11-0ubuntu1.14.04.10.80.11-0ubuntu1.14.04.2
0.80.11-0ubuntu1.14.04.3

History

History
WhenChangedSources
2026-11-03aliases, productsEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 43 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open