VDB
CVE-2019-3821
CVE-2019-3821
REJECTED
CVSS 7.5 HIGH
A flaw was found in the way civetweb frontend was handling requests for ceph RGW server with SSL enabled. An unauthenticated attacker could create multiple connections to ceph RADOS gateway to exhaust file descriptors for ceph-radosgw service resulting in a remote denial of service.
EPSS 2.95% · 86.7th percentile
Risk Scores
CVSS 3.0
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
2.95%
86.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:16.04:LTS | ceph | 10.2.10-0ubuntu0.16.04.1, 10.1.0-0ubuntu1, 10.1.1-0ubuntu1 |
| Ubuntu:18.04:LTS | ceph | 12.2.1-0ubuntu1, 12.2.2-0ubuntu1, 12.2.2-0ubuntu2 |
Timeline
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Dec 28, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 3, 2022 EPSS Score
- Jul 5, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Jan 10, 2023 EPSS Score
- Mar 14, 2023 EPSS Score
References
- https://ubuntu.com/security/CVE-2019-3821 third-party-advisory
- https://ubuntu.com/security/notices/USN-4035-1 vendor-advisory
- https://www.cve.org/CVERecord?id=CVE-2019-3821 third-party-advisory