{"id":"CVE-2019-19337","aliases":["EUVD-2019-8958","GHSA-pg96-f95x-566r","RHSA-2019:4353"],"status":"published","title":"A flaw was found in Red Hat Ceph Storage version 3 in the way the Ceph RADOS Gateway daemon...","description":"A flaw was found in Red Hat Ceph Storage version 3 in the way the Ceph RADOS Gateway daemon handles S3 requests. An authenticated attacker can abuse this flaw by causing a remote denial of service by sending a specially crafted HTTP Content-Length header to the Ceph RADOS Gateway server.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0132,"percentile":0.71049,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2019-12-23T16:18:04Z","modified":"2026-06-29T10:28:05Z","fixes":[{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-base","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-common","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-debuginfo","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-mgr","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-mon","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-selinux","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-test","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"libcephfs-devel","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"libcephfs2","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"librados-devel","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"librados2","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"libradosstriper1","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"librbd-devel","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"librbd1","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"librgw-devel","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"librgw2","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"python-cephfs","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"python-rados","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"python-rbd","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"python-rgw","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-osd","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-ansible","fixed_in":["0:3.2.38-1.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-fuse","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-mds","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-radosgw","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"cephmetrics","fixed_in":["0:2.0.9-1.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"cephmetrics-ansible","fixed_in":["0:2.0.9-1.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:3::el7","package":"rbd-mirror","fixed_in":["2:12.2.12-84.el7cp"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-mgr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-mon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"python-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"python-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"python-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"python-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-osd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.38-1.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-mds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"ceph-radosgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"cephmetrics","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.9-1.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"cephmetrics-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.9-1.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:3::el7","package":"rbd-mirror","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:12.2.12-84.el7cp"}]}]}],"products":[{"vendor":"red hat","product":"ceph storage"},{"vendor":"redhat","product":"ceph_storage"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19337","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Mitigation","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19337","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-pg96-f95x-566r"},{"url":"https://access.redhat.com/errata/RHSA-2019:4353","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1552210","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1569689","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1603551","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1616159","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1622729","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1623580","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1638904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640525","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1644611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1646456","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1654790","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1664112","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1665877","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1734513","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1744529","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1749097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1749489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1749874","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1750115","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1752163","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1753942","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1754432","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1757298","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1757400","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765230","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1765652","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1769760","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1777050","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1779158","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1780688","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1781170","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_4353.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-19337","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19337","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-19337","description":"A flaw was found in Red Hat Ceph Storage version 3 in the way the Ceph RADOS Gateway daemon handles S3 requests. An authenticated attacker can abuse this flaw by causing a remote denial of service by sending a specially crafted HTTP Content-Length header to the Ceph RADOS Gateway server.","status":"published","published":"2019-12-23T16:18:04Z","modified":"2024-08-05T02:16:46.979Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:20:20.74896Z"}],"euvd":[{"id":"EUVD-2019-8958","description":"A flaw was found in Red Hat Ceph Storage version 3 in the way the Ceph RADOS Gateway daemon handles S3 requests. An authenticated attacker can abuse this flaw by causing a remote denial of service by sending a specially crafted HTTP Content-Length header to the Ceph RADOS Gateway server.","status":"published","published":"2019-12-23T16:18:04Z","modified":"2024-08-05T02:16:46Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T02:40:25.841101Z"}],"ghsa":[{"id":"GHSA-pg96-f95x-566r","title":"A flaw was found in Red Hat Ceph Storage version 3 in the way the Ceph RADOS Gateway daemon...","description":"A flaw was found in Red Hat Ceph Storage version 3 in the way the Ceph RADOS Gateway daemon handles S3 requests. An authenticated attacker can abuse this flaw by causing a remote denial of service by sending a specially crafted HTTP Content-Length header to the Ceph RADOS Gateway server.","status":"published","published":"2022-05-24T17:04:54Z","modified":"2024-04-04T02:44:57Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:56:11.559223Z"}],"nvd":[{"id":"CVE-2019-19337","description":"A flaw was found in Red Hat Ceph Storage version 3 in the way the Ceph RADOS Gateway daemon handles S3 requests. An authenticated attacker can abuse this flaw by causing a remote denial of service by sending a specially crafted HTTP Content-Length header to the Ceph RADOS Gateway server.","status":"published","published":"2019-12-23T17:15:11.88Z","modified":"2026-06-17T02:26:31.69Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:05:40.856496Z"}],"osv":[{"id":"RHSA-2019:4353","title":"Red Hat Security Advisory: Red Hat Ceph Storage security, bug fix, and enhancement update","status":"published","published":"2024-09-13T16:14:55Z","modified":"2026-06-29T10:28:05Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:06.535721Z"}]}}