CVE-2019-10222
- State
- Published
- Severity
- 7.5 High
- Published
- Nov 8, 2019
- Updated
- Feb 13, 2025
- Reserved
- Mar 27, 2019
Description
A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph RGW server by sending valid HTTP headers and terminating the connection, resulting in a remote denial of service for Ceph RGW clients.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 7.5 High | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | redhat |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
cephThe Ceph Project |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.