CVE-2016-9579 Denial of service in ceph
Remote attackers can cause denial of service in Ceph Object Gateway by sending crafted cross-origin requests when CORS is enabled.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-9579?
CVE-2016-9579 is a medium-severity denial of service vulnerability in Redhat Enterprise Linux Desktop, published on 1 Aug 2018. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket. A remote unauthenticated attacker could use this flaw to cause denial of service by sending a specially-crafted cross-origin HTTP request. Ceph branches 1.3.x and 2.x are affected.
Weakness: CWE-20
Which versions are affected by CVE-2016-9579?
It affects 6 products.
Linux distribution packages (39)
ceph Red Hat:ceph_storage:1.3::el7 | All versions | 1:0.94.9-9.el7cp |
ceph-common Red Hat:ceph_storage:1.3::el7 | All versions | 1:0.94.9-9.el7cp |
ceph-debuginfo Red Hat:ceph_storage:1.3::el7 | All versions | 1:0.94.9-9.el7cp |
ceph-mon Red Hat:ceph_storage:1.3::el7 | All versions | 1:0.94.9-9.el7cp |
ceph-osd Red Hat:ceph_storage:1.3::el7 | All versions | 1:0.94.9-9.el7cp |
ceph-radosgw Red Hat:ceph_storage:1.3::el7 | All versions | 1:0.94.9-9.el7cp |
ceph-selinux Red Hat:ceph_storage:1.3::el7 | All versions | 1:0.94.9-9.el7cp |
ceph-test Red Hat:ceph_storage:1.3::el7 | All versions | 1:0.94.9-9.el7cp |
librados2 Red Hat:ceph_storage:1.3::el7 | All versions | 1:0.94.9-9.el7cp |
librados2-devel Red Hat:ceph_storage:1.3::el7 | All versions | 1:0.94.9-9.el7cp |
librbd1 Red Hat:ceph_storage:1.3::el7 | All versions | 1:0.94.9-9.el7cp |
librbd1-devel Red Hat:ceph_storage:1.3::el7 | All versions | 1:0.94.9-9.el7cp |
python-rados Red Hat:ceph_storage:1.3::el7 | All versions | 1:0.94.9-9.el7cp |
python-rbd Red Hat:ceph_storage:1.3::el7 | All versions | 1:0.94.9-9.el7cp |
ceph Red Hat:ceph_storage:2::el7 | All versions | 1:10.2.3-17.el7cp |
ceph-base Red Hat:ceph_storage:2::el7 | All versions | 1:10.2.3-17.el7cp |
ceph-common Red Hat:ceph_storage:2::el7 | All versions | 1:10.2.3-17.el7cp |
ceph-debuginfo Red Hat:ceph_storage:2::el7 | All versions | 1:10.2.3-17.el7cp |
ceph-fuse Red Hat:ceph_storage:2::el7 | All versions | 1:10.2.3-17.el7cp |
ceph-mds Red Hat:ceph_storage:2::el7 | All versions | 1:10.2.3-17.el7cp |
ceph-mon Red Hat:ceph_storage:2::el7 | All versions | 1:10.2.3-17.el7cp |
ceph-osd Red Hat:ceph_storage:2::el7 | All versions | 1:10.2.3-17.el7cp |
ceph-radosgw Red Hat:ceph_storage:2::el7 | All versions | 1:10.2.3-17.el7cp |
ceph-selinux Red Hat:ceph_storage:2::el7 | All versions | 1:10.2.3-17.el7cp |
ceph-test Red Hat:ceph_storage:2::el7 | All versions | 1:10.2.3-17.el7cp |
libcephfs1 Red Hat:ceph_storage:2::el7 | All versions | 1:10.2.3-17.el7cp |
libcephfs1-devel Red Hat:ceph_storage:2::el7 | All versions | 1:10.2.3-17.el7cp |
librados2 Red Hat:ceph_storage:2::el7 | All versions | 1:10.2.3-17.el7cp |
librados2-devel Red Hat:ceph_storage:2::el7 | All versions | 1:10.2.3-17.el7cp |
librbd1 Red Hat:ceph_storage:2::el7 | All versions | 1:10.2.3-17.el7cp |
librbd1-devel Red Hat:ceph_storage:2::el7 | All versions | 1:10.2.3-17.el7cp |
librgw2 Red Hat:ceph_storage:2::el7 | All versions | 1:10.2.3-17.el7cp |
librgw2-devel Red Hat:ceph_storage:2::el7 | All versions | 1:10.2.3-17.el7cp |
python-cephfs Red Hat:ceph_storage:2::el7 | All versions | 1:10.2.3-17.el7cp |
python-rados Red Hat:ceph_storage:2::el7 | All versions | 1:10.2.3-17.el7cp |
python-rbd Red Hat:ceph_storage:2::el7 | All versions | 1:10.2.3-17.el7cp |
rbd-mirror Red Hat:ceph_storage:2::el7 | All versions | 1:10.2.3-17.el7cp |
ceph SUSE:Enterprise Storage 4 | All versions | 10.2.6+git.1490339825.57146d8-11.7 |
ceph-test SUSE:Enterprise Storage 4 | All versions | 10.2.6+git.1490339825.57146d8-11.7 |
Products include Redhat Ceph Storage, Redhat Ceph Storage Mon, Redhat Ceph Storage Osd, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Workstation.
How do I fix CVE-2016-9579?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2016-9579 being exploited?
There is no known exploitation of CVE-2016-9579 in the wild and no public exploit code.
Other vulnerabilities in Redhat Enterprise Linux Desktop
Sources
Also known as DEBIAN-CVE-2016-9579, GHSA-2594-xrq4-4jm3, RHSA-2016:2954, RHSA-2016:2994, SUSE-SU-2017:1479-1, UBUNTU-CVE-2016-9579.