CVE-2016-5009

The handle_command function in mon/Monitor.cc in Ceph allows remote authenticated users to cause a denial of service (segmentation fault and ceph monitor crash) via an (1) empty or (2) crafted prefix.

References

Affected packages

Git / github.com/ceph/ceph

Affected ranges

Type

GIT

Repo

https://github.com/ceph/ceph

Events

Introduced

Last affected

e832001feaf8c176593e0325c8298e3f16dfb403

Fixed

957ece7e95d8f8746191fd9629622d4457d690d6

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.94.6"
        }
    ]
}

Affected versions

v0.*

v0.1

v0.18

v0.19

v0.2

v0.4

v0.5

v0.6

v0.7.1

v0.7.2

v0.7.3

v0.9

v0.93

v0.94

v0.94.1

v0.94.2

v0.94.3

v0.94.4

v0.94.5

v0.94.6

v11.*

v11.0.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-5009.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.3"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.3"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.0"
            }
        ]
    }
]