A vulnerability was found in Ceph (the affected version is unknown). It has been classified as critical. Affected is the function handle_command of the file mon/Monitor.cc. The manipulation with an unknown input leads to a input validation vulnerability. CWE is classifying the issue as CWE-20. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. This is going to have an impact on availability. CVE summarizes:

The handle_command function in mon/Monitor.cc in Ceph allows remote authenticated users to cause a denial of service (segmentation fault and ceph monitor crash) via an (1) empty or (2) crafted prefix.

The weakness was disclosed 07/12/2016 (Website). The advisory is available at github.com. This vulnerability is traded as CVE-2016-5009 since 05/24/2016. The exploitability is told to be easy. It is possible to launch the attack remotely. A authentication is needed for exploitation. Technical details are known, but there is no available exploit.

The vulnerability scanner Nessus provides a plugin with the ID 95976 (openSUSE Security Update : ceph (openSUSE-2016-1500)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family SuSE Local Security Checks and running in the context l. The commercial vulnerability scanner Qualys is able to test this issue with plugin 196943 (Ubuntu Security Notification for Ceph Vulnerabilities (USN-3452-1)).

Upgrading eliminates this vulnerability. A possible mitigation has been published 6 months after the disclosure of the vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (95976).

Productinfo

Name

• Ceph

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion