Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:12833
HistoryJan 15, 2019 - 9:22 a.m.

Denial Of Service (DoS)

2019-01-1509:22:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.006 Low

EPSS

Percentile

78.0%

ceph is vulnerable to denial of service (DoS) attacks. The vulnerability exists as ceph before 12.2.3 and 13.x through 13.0.1, the rgw_civetweb.cc RGWCivetWeb::init_env function in radosgw doesn’t handle malformed HTTP headers properly, allowing for denial of service.