{"id":"CVE-2018-16846","aliases":["DEBIAN-CVE-2018-16846","DLA-1696-1","DLA-2735-1","EUVD-2018-8642","GHSA-77fq-6x6c-cq7q","RHSA-2019:2538","SUSE-SU-2019:0499-1","SUSE-SU-2019:0586-1","UBUNTU-CVE-2018-16846","USN-4035-1","openSUSE-SU-2019:1284-1"],"status":"published","title":"It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial...","description":"It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.02136,"percentile":0.82141,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-770"],"published":"2019-01-15T00:00:00Z","modified":"2026-10-24T10:30:25Z","fixes":[{"ecosystem":"Debian:12","package":"ceph","fixed_in":["12.2.11+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ceph","fixed_in":["12.2.11+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ceph","fixed_in":["12.2.11+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"ceph","fixed_in":["10.2.11-0ubuntu0.16.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"ceph","fixed_in":["12.2.11-0ubuntu0.18.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.11+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.11+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.11+dfsg1-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.80.7-2+deb8u3"}]}],"versions":["0.80.7-2","0.80.7-2+deb8u1","0.80.7-2+deb8u2"],"bundled":2},{"source":"osv","ecosystem":"Debian:9","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2.11-2+deb9u1"}]}],"versions":["10.2.11-1","10.2.11-2","10.2.5-7.2","10.2.7-0exp1"],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-mgr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-mon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"python-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"python-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"python-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"python-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-osd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.24-1.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-iscsi-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6-19.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-mds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-radosgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"cephmetrics","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-1.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"cephmetrics-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.6-1.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"libntirpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.4-1.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"libntirpc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.4-1.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"nfs-ganesha","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.4-10.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"nfs-ganesha-ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.4-10.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"nfs-ganesha-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.4-10.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"nfs-ganesha-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.4-10.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"python-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.1-16.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"python-crypto-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.1-16.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"python2-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.1-16.el7ost"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"rbd-mirror","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-45.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.10+git.1549630712.bb089269ea-2.27.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.10+git.1549630712.bb089269ea-2.27.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.10+git.1549630712.bb089269ea-2.27.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.10+git.1549630712.bb089269ea-2.27.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.10+git.1549630712.bb089269ea-2.27.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.10+git.1549630712.bb089269ea-2.27.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.10+git.1549630712.bb089269ea-2.27.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.10+git.1549630712.bb089269ea-2.27.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.10+git.1549630712.bb089269ea-2.27.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2.4.125+gad802694f5-3.7.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.67.4-0ubuntu2","0.67.4-0ubuntu3","0.72-0ubuntu1","0.72.1-0ubuntu1","0.72.1-2","0.72.1-3","0.72.2-1","0.72.2-2","0.78-0ubuntu1","0.79-0ubuntu1","0.80.1-0ubuntu1","0.80.1-0ubuntu1.1","0.80.5-0ubuntu0.14.04.1","0.80.7-0ubuntu0.14.04.1","0.80.9-0ubuntu0.14.04.1","0.80.9-0ubuntu0.14.04.2","0.80.10-0ubuntu0.14.04.1","0.80.10-0ubuntu1.14.04.2","0.80.10-0ubuntu1.14.04.3","0.80.11-0ubuntu1.14.04.1","0.80.11-0ubuntu1.14.04.2","0.80.11-0ubuntu1.14.04.3","0.80.11-0ubuntu1.14.04.4","0.80.11-0ubuntu1.14.04.4+esm2","0.80.11-0ubuntu1.14.04.4+esm3","0.80.11-0ubuntu1.14.04.4+esm4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2.11-0ubuntu0.16.04.2"}]}],"versions":["0.94.3-0ubuntu2","0.94.5-0ubuntu1","9.2.0-0ubuntu3","9.2.0-0ubuntu4","9.2.0-0ubuntu5","9.2.0-0ubuntu6","10.0.2-0ubuntu1","10.0.3-0ubuntu1","10.0.5-0ubuntu1","10.1.0-0ubuntu1","10.1.1-0ubuntu1","10.1.2-0ubuntu1","10.2.0-0ubuntu0.16.04.1","10.2.0-0ubuntu0.16.04.2","10.2.2-0ubuntu0.16.04.2","10.2.3-0ubuntu0.16.04.2","10.2.5-0ubuntu0.16.04.1","10.2.6-0ubuntu0.16.04.1","10.2.7-0ubuntu0.16.04.1","10.2.9-0ubuntu0.16.04.1","10.2.10-0ubuntu0.16.04.1","10.2.11-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.11-0ubuntu0.18.04.1"}]}],"versions":["12.2.0-0ubuntu1","12.2.1-0ubuntu1","12.2.2-0ubuntu1","12.2.2-0ubuntu2","12.2.4-0ubuntu1","12.2.4-0ubuntu1.1","12.2.7-0ubuntu0.18.04.1","12.2.8-0ubuntu0.18.04.1","12.2.8-0ubuntu0.18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2.11-0ubuntu0.16.04.2"}]}],"versions":["0.94.3-0ubuntu2","0.94.5-0ubuntu1","9.2.0-0ubuntu3","9.2.0-0ubuntu4","9.2.0-0ubuntu5","9.2.0-0ubuntu6","10.0.2-0ubuntu1","10.0.3-0ubuntu1","10.0.5-0ubuntu1","10.1.0-0ubuntu1","10.1.1-0ubuntu1","10.1.2-0ubuntu1","10.2.0-0ubuntu0.16.04.1","10.2.0-0ubuntu0.16.04.2","10.2.2-0ubuntu0.16.04.2","10.2.3-0ubuntu0.16.04.2","10.2.5-0ubuntu0.16.04.1","10.2.6-0ubuntu0.16.04.1","10.2.7-0ubuntu0.16.04.1","10.2.9-0ubuntu0.16.04.1","10.2.10-0ubuntu0.16.04.1","10.2.11-0ubuntu0.16.04.1"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2.4.125+gad802694f5-lp150.2.3.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"ceph-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2.4.125+gad802694f5-lp150.2.3.1"}]}],"bundled":5}],"products":[{"vendor":"[unknown]","product":"ceph"},{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"ceph","product":"ceph"},{"vendor":"debian","product":"debian_linux"},{"vendor":"opensuse","product":"leap"},{"vendor":"redhat","product":"ceph"},{"vendor":"redhat","product":"ceph_storage"},{"vendor":"redhat","product":"enterprise_linux_server"}],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00002.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00100.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4035-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2538","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2541","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16846","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://ceph.com/releases/13-2-4-mimic-released/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/08/msg00013.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16846","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-77fq-6x6c-cq7q"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-16846","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/3.3/html/release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1337915","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1572933","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1599852","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1627567","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1628309","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1628311","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631010","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1637327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1639712","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1644321","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1644461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1644610","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1644847","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1651054","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1656908","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1659611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1661504","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1665334","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1666822","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1668478","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1668896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1668897","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1669838","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1670527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1670785","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1677269","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1680144","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1680155","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685253","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685734","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1686306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1695850","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1696227","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1696691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1696880","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1700896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1701029","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1702091","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1702092","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1702093","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1702097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1702099","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1702100","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1702732","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1703557","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1704948","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1705258","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1705922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1708346","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1708650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1708798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1709765","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1710855","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1713779","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1714810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1714814","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1715577","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1715946","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1717135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1718135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1718328","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1719023","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720205","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720741","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1721165","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1722663","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1722664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1725521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1725536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732142","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732706","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1734550","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1739209","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2538.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14662","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14662","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14662","tags":["advisory"]},{"url":"https://ceph.com/releases/13-2-4-mimic-released","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16846","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16846","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16889","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16889","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16889","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190499-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1111177","tags":["report"]},{"url":"https://bugzilla.suse.com/1113246","tags":["report"]},{"url":"https://bugzilla.suse.com/1114710","tags":["report"]},{"url":"https://bugzilla.suse.com/1121567","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14662","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16889","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190586-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1084645","tags":["report"]},{"url":"https://bugzilla.suse.com/1086613","tags":["report"]},{"url":"https://bugzilla.suse.com/1096748","tags":["report"]},{"url":"https://bugzilla.suse.com/1099162","tags":["report"]},{"url":"https://bugzilla.suse.com/1101262","tags":["report"]},{"url":"https://bugzilla.suse.com/1114567","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1129","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-16846","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4035-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-14662","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-16889","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-3821","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3PBU365BKTDZHLKZL2NDWGZPNQHYX4IW/#3PBU365BKTDZHLKZL2NDWGZPNQHYX4IW","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2018-16846","description":"It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices.","status":"published","published":"2019-01-15T18:00:00Z","modified":"2024-08-05T10:32:53.997Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:35:11.426178Z"}],"euvd":[{"id":"EUVD-2018-8642","description":"It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices.","status":"published","published":"2019-01-15T18:00:00Z","modified":"2024-08-05T10:32:53Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T02:39:40.316949Z"}],"ghsa":[{"id":"GHSA-77fq-6x6c-cq7q","title":"It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial...","description":"It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices.","status":"published","published":"2022-05-13T01:02:10Z","modified":"2023-02-01T05:02:30Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:49:55.565803Z"}],"nvd":[{"id":"CVE-2018-16846","description":"It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices.","status":"published","published":"2019-01-15T18:29:00.247Z","modified":"2026-06-17T01:44:53.903Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:04:53.079938Z"}],"osv":[{"id":"CVE-2018-16846","description":"It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices.","status":"published","published":"2019-01-15T18:29:00.247Z","modified":"2026-10-24T10:30:25.78619274Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:08.533609Z"},{"id":"DEBIAN-CVE-2018-16846","description":"It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices.","status":"published","published":"2019-01-15T18:29:00.247Z","modified":"2026-10-23T18:03:01.336090291Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:30.290351Z"},{"id":"RHSA-2019:2538","title":"Red Hat Security Advisory: Red Hat Ceph Storage 3.3 security, bug fix, and enhancement update","status":"published","published":"2024-09-13T15:12:04Z","modified":"2026-06-29T10:26:06Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"UBUNTU-CVE-2018-16846","description":"It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices.","status":"published","published":"2019-01-15T00:00:00Z","modified":"2026-04-22T11:47:06.644093Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:17.496046Z"},{"id":"DLA-1696-1","title":"ceph - security update","status":"published","published":"2019-02-28T00:00:00Z","modified":"2026-03-09T01:23:12.779361Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DLA-2735-1","title":"ceph - security update","status":"published","published":"2021-08-09T00:00:00Z","modified":"2026-03-09T01:19:18.378884Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"openSUSE-SU-2019:1284-1","title":"Security update for ceph","description":"This update for ceph version 13.2.4 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-14662: Fixed an issue with LUKS 'config-key' safety (bsc#1111177)\n- CVE-2018-10861: Fixed an authorization bypass on OSD pool ops in ceph-mon (bsc#1099162)\n- CVE-2018-1128: Fixed signature check bypass in cephx (bsc#1096748)\n- CVE-2018-1129: Fixed replay attack in cephx protocol (bsc#1096748)\n- CVE-2018-16846: Enforced bounds on max-keys/max-uploads/max-parts in rgw (bsc#1114710)\n\nNon-security issues fixed:\n\n- ceph-volume Python 3 fixes (bsc#1114567)\n- Fixed python3 module loading (bsc#1086613)\n- Fixed an issue where ceph build fails (bsc#1084645)\n- ceph's SPDK builds with march=native (bsc#1101262)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-04-27T15:48:20Z","modified":"2026-02-04T02:16:09.043473Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"SUSE-SU-2019:0499-1","title":"Security update for ceph","description":"This update for ceph fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-14662: mon: limit caps allowed to access the config store (bsc#1111177)\n- CVE-2018-16846: rgw: enforce bounds on max-keys/max-uploads/max-parts (bsc#1114710)\n- CVE-2018-16889: rgw: sanitize customer encryption keys from log output in v4 auth (bsc#1121567)\n\nNon-security issue fixed:\n\n- os/bluestore: avoid frequent allocator dump on bluefs rebalance failure (bsc#1113246)\n","status":"published","published":"2019-02-26T15:45:36Z","modified":"2026-02-04T03:34:15.826392Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0586-1","title":"Security update for ceph","description":"This update for ceph version 13.2.4 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-14662: Fixed an issue with LUKS 'config-key' safety (bsc#1111177)\n- CVE-2018-10861: Fixed an authorization bypass on OSD pool ops in ceph-mon (bsc#1099162)\n- CVE-2018-1128: Fixed signature check bypass in cephx (bsc#1096748)\n- CVE-2018-1129: Fixed replay attack in cephx protocol (bsc#1096748)\n- CVE-2018-16846: Enforced bounds on max-keys/max-uploads/max-parts in rgw\n\nNon-security issues fixed:\n\n- ceph-volume Python 3 fixes (bsc#1114567)\n- fix python3 module loading (bsc#1086613)\n","status":"published","published":"2019-03-12T12:00:39Z","modified":"2026-02-04T02:49:28.98909Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"USN-4035-1","title":"ceph vulnerabilities","description":"It was discovered that Ceph incorrectly handled read only permissions. An\nauthenticated attacker could use this issue to obtain dm-crypt encryption\nkeys. This issue only affected Ubuntu 16.04 LTS. (CVE-2018-14662)\n\nIt was discovered that Ceph incorrectly handled certain OMAPs holding\nbucket indices. An authenticated attacker could possibly use this issue to\ncause a denial of service. This issue only affected Ubuntu 16.04 LTS.\n(CVE-2018-16846)\n\nIt was discovered that Ceph incorrectly sanitized certain debug logs. A\nlocal attacker could possibly use this issue to obtain encryption key\ninformation. This issue was only addressed in Ubuntu 18.10 and Ubuntu\n19.04. (CVE-2018-16889)\n\nIt was discovered that Ceph incorrectly handled certain civetweb requests.\nA remote attacker could possibly use this issue to consume resources,\nleading to a denial of service. This issue only affected Ubuntu 18.10 and\nUbuntu 19.04. (CVE-2019-3821)\n","status":"published","published":"2019-06-25T11:40:06Z","modified":"2026-04-22T09:58:04.824743Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}