CVE-2019-10222 Vulnerability Details

  /     /     /  

CVE-2019-10222 Metadata Quick Info

CVE Published: 08/11/2019 | CVE Updated: 04/08/2024 | CVE Year: 2019
Source: redhat | Vendor: The Ceph Project | Product: ceph
Status : PUBLISHED

---

CVE-2019-10222 Description

A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph RGW server by sending valid HTTP headers and terminating the connection, resulting in a remote denial of service for Ceph RGW clients.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-755
CWE Name: CWE-755
Source: The Ceph Project

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).