CVE-2016-9579 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2016-9579 Interim 1 22 2023-12-08T01:43:33Z current 2021-05-30T13:47:59Z 2023-12-08T01:43:33Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2016-9579 A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket. A remote unauthenticated attacker could use this flaw to cause denial of service by sending a specially-crafted cross-origin HTTP request. Ceph branches 1.3.x and 2.x are affected. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2017-June/002935.html E-Mail link for SUSE-SU-2017:1479-1 https://lists.suse.com/pipermail/sle-security-updates/2017-December/003463.html E-Mail link for SUSE-SU-2017:3171-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Enterprise Storage 3 SUSE Enterprise Storage 4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Software Development Kit 11 SP4 ceph ceph-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 ceph-10.2.6+git.1490339825.57146d8-11.7 ceph-base-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 ceph-base-10.2.6+git.1490339825.57146d8-11.7 ceph-common ceph-common-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 ceph-common-10.2.6+git.1490339825.57146d8-11.7 ceph-devel ceph-fuse-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 ceph-fuse-10.2.6+git.1490339825.57146d8-11.7 ceph-mds-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 ceph-mds-10.2.6+git.1490339825.57146d8-11.7 ceph-mon-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 ceph-mon-10.2.6+git.1490339825.57146d8-11.7 ceph-osd-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 ceph-osd-10.2.6+git.1490339825.57146d8-11.7 ceph-radosgw-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 ceph-radosgw-10.2.6+git.1490339825.57146d8-11.7 ceph-test-10.2.10+git.1510313171.6d5f0aeac1-13.7.2 ceph-test-10.2.6+git.1490339825.57146d8-11.7 libcephfs1 libcephfs1-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 libcephfs1-10.2.6+git.1490339825.57146d8-11.7 librados2 librados2-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 librados2-10.2.6+git.1490339825.57146d8-11.7 libradosstriper1-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 libradosstriper1-10.2.6+git.1490339825.57146d8-11.7 librbd1 librbd1-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 librbd1-10.2.6+git.1490339825.57146d8-11.7 librgw2-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 librgw2-10.2.6+git.1490339825.57146d8-11.7 python-ceph python-ceph-compat-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 python-ceph-compat-10.2.6+git.1490339825.57146d8-11.7 python-cephfs-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 python-cephfs-10.2.6+git.1490339825.57146d8-11.7 python-rados-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 python-rados-10.2.6+git.1490339825.57146d8-11.7 python-rbd-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 python-rbd-10.2.6+git.1490339825.57146d8-11.7 rbd-fuse-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 rbd-fuse-10.2.6+git.1490339825.57146d8-11.7 rbd-mirror-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 rbd-mirror-10.2.6+git.1490339825.57146d8-11.7 rbd-nbd-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 rbd-nbd-10.2.6+git.1490339825.57146d8-11.7 ceph-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 as a component of SUSE Enterprise Storage 3 ceph-base-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 as a component of SUSE Enterprise Storage 3 ceph-common-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 as a component of SUSE Enterprise Storage 3 ceph-fuse-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 as a component of SUSE Enterprise Storage 3 ceph-mds-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 as a component of SUSE Enterprise Storage 3 ceph-mon-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 as a component of SUSE Enterprise Storage 3 ceph-osd-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 as a component of SUSE Enterprise Storage 3 ceph-radosgw-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 as a component of SUSE Enterprise Storage 3 ceph-test-10.2.10+git.1510313171.6d5f0aeac1-13.7.2 as a component of SUSE Enterprise Storage 3 libcephfs1-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 as a component of SUSE Enterprise Storage 3 librados2-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 as a component of SUSE Enterprise Storage 3 libradosstriper1-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 as a component of SUSE Enterprise Storage 3 librbd1-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 as a component of SUSE Enterprise Storage 3 librgw2-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 as a component of SUSE Enterprise Storage 3 python-ceph-compat-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 as a component of SUSE Enterprise Storage 3 python-cephfs-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 as a component of SUSE Enterprise Storage 3 python-rados-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 as a component of SUSE Enterprise Storage 3 python-rbd-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 as a component of SUSE Enterprise Storage 3 rbd-fuse-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 as a component of SUSE Enterprise Storage 3 rbd-mirror-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 as a component of SUSE Enterprise Storage 3 rbd-nbd-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 as a component of SUSE Enterprise Storage 3 ceph-10.2.6+git.1490339825.57146d8-11.7 as a component of SUSE Enterprise Storage 4 ceph-base-10.2.6+git.1490339825.57146d8-11.7 as a component of SUSE Enterprise Storage 4 ceph-common-10.2.6+git.1490339825.57146d8-11.7 as a component of SUSE Enterprise Storage 4 ceph-fuse-10.2.6+git.1490339825.57146d8-11.7 as a component of SUSE Enterprise Storage 4 ceph-mds-10.2.6+git.1490339825.57146d8-11.7 as a component of SUSE Enterprise Storage 4 ceph-mon-10.2.6+git.1490339825.57146d8-11.7 as a component of SUSE Enterprise Storage 4 ceph-osd-10.2.6+git.1490339825.57146d8-11.7 as a component of SUSE Enterprise Storage 4 ceph-radosgw-10.2.6+git.1490339825.57146d8-11.7 as a component of SUSE Enterprise Storage 4 ceph-test-10.2.6+git.1490339825.57146d8-11.7 as a component of SUSE Enterprise Storage 4 libcephfs1-10.2.6+git.1490339825.57146d8-11.7 as a component of SUSE Enterprise Storage 4 librados2-10.2.6+git.1490339825.57146d8-11.7 as a component of SUSE Enterprise Storage 4 libradosstriper1-10.2.6+git.1490339825.57146d8-11.7 as a component of SUSE Enterprise Storage 4 librbd1-10.2.6+git.1490339825.57146d8-11.7 as a component of SUSE Enterprise Storage 4 librgw2-10.2.6+git.1490339825.57146d8-11.7 as a component of SUSE Enterprise Storage 4 python-ceph-compat-10.2.6+git.1490339825.57146d8-11.7 as a component of SUSE Enterprise Storage 4 python-cephfs-10.2.6+git.1490339825.57146d8-11.7 as a component of SUSE Enterprise Storage 4 python-rados-10.2.6+git.1490339825.57146d8-11.7 as a component of SUSE Enterprise Storage 4 python-rbd-10.2.6+git.1490339825.57146d8-11.7 as a component of SUSE Enterprise Storage 4 rbd-fuse-10.2.6+git.1490339825.57146d8-11.7 as a component of SUSE Enterprise Storage 4 rbd-mirror-10.2.6+git.1490339825.57146d8-11.7 as a component of SUSE Enterprise Storage 4 rbd-nbd-10.2.6+git.1490339825.57146d8-11.7 as a component of SUSE Enterprise Storage 4 ceph as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata ceph-common as a component of SUSE Linux Enterprise Server 11 SP4-LTSS libcephfs1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS librados2 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS librbd1 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS python-ceph as a component of SUSE Linux Enterprise Server 11 SP4-LTSS ceph as a component of SUSE Linux Enterprise Server 11 SP4-LTSS ceph-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 ceph as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket. A remote unauthenticated attacker could use this flaw to cause denial of service by sending a specially-crafted cross-origin HTTP request. Ceph branches 1.3.x and 2.x are affected. CVE-2016-9579 SUSE Enterprise Storage 3:ceph-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 SUSE Enterprise Storage 3:ceph-base-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 SUSE Enterprise Storage 3:ceph-common-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 SUSE Enterprise Storage 3:ceph-fuse-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 SUSE Enterprise Storage 3:ceph-mds-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 SUSE Enterprise Storage 3:ceph-mon-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 SUSE Enterprise Storage 3:ceph-osd-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 SUSE Enterprise Storage 3:ceph-radosgw-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 SUSE Enterprise Storage 3:ceph-test-10.2.10+git.1510313171.6d5f0aeac1-13.7.2 SUSE Enterprise Storage 3:libcephfs1-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 SUSE Enterprise Storage 3:librados2-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 SUSE Enterprise Storage 3:libradosstriper1-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 SUSE Enterprise Storage 3:librbd1-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 SUSE Enterprise Storage 3:librgw2-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 SUSE Enterprise Storage 3:python-ceph-compat-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 SUSE Enterprise Storage 3:python-cephfs-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 SUSE Enterprise Storage 3:python-rados-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 SUSE Enterprise Storage 3:python-rbd-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 SUSE Enterprise Storage 3:rbd-fuse-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 SUSE Enterprise Storage 3:rbd-mirror-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 SUSE Enterprise Storage 3:rbd-nbd-10.2.10+git.1510313171.6d5f0aeac1-13.7.3 SUSE Enterprise Storage 4:ceph-10.2.6+git.1490339825.57146d8-11.7 SUSE Enterprise Storage 4:ceph-base-10.2.6+git.1490339825.57146d8-11.7 SUSE Enterprise Storage 4:ceph-common-10.2.6+git.1490339825.57146d8-11.7 SUSE Enterprise Storage 4:ceph-fuse-10.2.6+git.1490339825.57146d8-11.7 SUSE Enterprise Storage 4:ceph-mds-10.2.6+git.1490339825.57146d8-11.7 SUSE Enterprise Storage 4:ceph-mon-10.2.6+git.1490339825.57146d8-11.7 SUSE Enterprise Storage 4:ceph-osd-10.2.6+git.1490339825.57146d8-11.7 SUSE Enterprise Storage 4:ceph-radosgw-10.2.6+git.1490339825.57146d8-11.7 SUSE Enterprise Storage 4:ceph-test-10.2.6+git.1490339825.57146d8-11.7 SUSE Enterprise Storage 4:libcephfs1-10.2.6+git.1490339825.57146d8-11.7 SUSE Enterprise Storage 4:librados2-10.2.6+git.1490339825.57146d8-11.7 SUSE Enterprise Storage 4:libradosstriper1-10.2.6+git.1490339825.57146d8-11.7 SUSE Enterprise Storage 4:librbd1-10.2.6+git.1490339825.57146d8-11.7 SUSE Enterprise Storage 4:librgw2-10.2.6+git.1490339825.57146d8-11.7 SUSE Enterprise Storage 4:python-ceph-compat-10.2.6+git.1490339825.57146d8-11.7 SUSE Enterprise Storage 4:python-cephfs-10.2.6+git.1490339825.57146d8-11.7 SUSE Enterprise Storage 4:python-rados-10.2.6+git.1490339825.57146d8-11.7 SUSE Enterprise Storage 4:python-rbd-10.2.6+git.1490339825.57146d8-11.7 SUSE Enterprise Storage 4:rbd-fuse-10.2.6+git.1490339825.57146d8-11.7 SUSE Enterprise Storage 4:rbd-mirror-10.2.6+git.1490339825.57146d8-11.7 SUSE Enterprise Storage 4:rbd-nbd-10.2.6+git.1490339825.57146d8-11.7 SUSE Linux Enterprise Server 11 SP3 for Teradata:ceph SUSE Linux Enterprise Server 11 SP4-LTSS:ceph SUSE Linux Enterprise Server 11 SP4-LTSS:ceph-common SUSE Linux Enterprise Server 11 SP4-LTSS:libcephfs1 SUSE Linux Enterprise Server 11 SP4-LTSS:librados2 SUSE Linux Enterprise Server 11 SP4-LTSS:librbd1 SUSE Linux Enterprise Server 11 SP4-LTSS:python-ceph SUSE Linux Enterprise Software Development Kit 11 SP4:ceph SUSE Linux Enterprise Software Development Kit 11 SP4:ceph-devel low 3.5 AV:N/AC:M/Au:S/C:N/I:N/A:P 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H