Read the docs
TI-2016-07801 Aliases CVE-2016-9579GHSA-2594-xrq4-4jm3

Improper input validation in Red Hat ceph

Priority MEDIUM 40CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA and Red Hat.

Summary

A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket. A remote unauthenticated attacker could use this flaw to cause denial of service by sending a specially-crafted cross-origin HTTP request. Ceph branches 1.3.x and 2.x are affected.

Why it matters now

EPSS 0.0434 91st percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix Fixed Red Hat: 4 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Red Hatceph1.3 and 2—No fix listedCNA
  • ceph VendorRed Hat Affected 1.3 and 2 Fixed in — No fix listed CNA

CPE configurations NVD · 12

CPEVersionsRoleVendor
cpe:2.3:a:redhat:ceph_storage:1.3:*:*:*:*:*:*:*1.3VulnerableRed Hat
cpe:2.3:a:redhat:ceph_storage_mon:1.3:*:*:*:*:*:*:*1.3VulnerableRed Hat
cpe:2.3:a:redhat:ceph_storage_mon:2:*:*:*:*:*:*:*2VulnerableRed Hat
cpe:2.3:a:redhat:ceph_storage_osd:1.3:*:*:*:*:*:*:*1.3VulnerableRed Hat
cpe:2.3:a:redhat:ceph_storage_osd:2:*:*:*:*:*:*:*2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:a:redhat:ceph_storage:2.0:*:*:*:*:*:*:*2.0VulnerableRed Hat
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*16.04Running onCanonical
  • cpe:2.3:a:redhat:ceph_storage:1.3:*:*:*:*:*:*:* Versions 1.3 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:ceph_storage_mon:1.3:*:*:*:*:*:*:* Versions 1.3 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:ceph_storage_mon:2:*:*:*:*:*:*:* Versions 2 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:ceph_storage_osd:1.3:*:*:*:*:*:*:* Versions 1.3 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:ceph_storage_osd:2:*:*:*:*:*:*:* Versions 2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:ceph_storage:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Red Hat
  • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* Versions 16.04 Running on ·Canonical
Show 2 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*7.0Running onRed Hat
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*14.04Running onCanonical
  • cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Running on ·Red Hat
  • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* Versions 14.04 Running on ·Canonical

Remediation

Red Hat 4 advisories

  • RHSA-2016:2995 Released 2016-12-21 · Red Hat rating Moderate
    Red Hat Ceph Storage 1.3 security and bug fix update
    • Red Hat Ceph Storage 1.3 for Ubuntu
  • RHSA-2016:2994 Released 2016-12-21 · Red Hat rating Moderate
    Red Hat Ceph Storage 1.3 security update
    • Red Hat Ceph Storage MON 1.3 ceph-1:0.94.9-9.el7cp, ceph-common-1:0.94.9-9.el7cp, ceph-mon-1:0.94.9-9.el7cp +8
    • Red Hat Ceph Storage OSD 1.3 ceph-1:0.94.9-9.el7cp, ceph-common-1:0.94.9-9.el7cp, ceph-osd-1:0.94.9-9.el7cp +8
    • Red Hat Ceph Storage Tools 1.3 ceph-1:0.94.9-9.el7cp, ceph-common-1:0.94.9-9.el7cp, ceph-radosgw-1:0.94.9-9.el7cp +7
  • RHSA-2016:2956 Released 2016-12-15 · Red Hat rating Moderate
    Red Hat Ceph Storage 2.1 security and bug fix update
    • Red Hat Ceph Storage 2 for Ubuntu
Show 1 more Red Hat advisories
  • RHSA-2016:2954 Released 2016-12-15 · Red Hat rating Moderate
    Red Hat Ceph Storage 2.1 security and bug fix update
    • Red Hat Ceph Storage MON 2 ceph-1:10.2.3-17.el7cp, ceph-base-1:10.2.3-17.el7cp, ceph-common-1:10.2.3-17.el7cp +14
    • Red Hat Ceph Storage OSD 2 ceph-1:10.2.3-17.el7cp, ceph-base-1:10.2.3-17.el7cp, ceph-common-1:10.2.3-17.el7cp +14
    • Red Hat Ceph Storage Tools 2 ceph-1:10.2.3-17.el7cp, ceph-base-1:10.2.3-17.el7cp, ceph-common-1:10.2.3-17.el7cp +16

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Ceph Storage 1.3 for UbuntuFixed RHSA-2016:2995
Red Hat Ceph Storage 2 for UbuntuFixed RHSA-2016:2956
Red Hat Ceph Storage MON 1.3Fixed RHSA-2016:2994
Red Hat Ceph Storage MON 2Fixed RHSA-2016:2954
Red Hat Ceph Storage OSD 1.3Fixed RHSA-2016:2994
Red Hat Ceph Storage OSD 2Fixed RHSA-2016:2954
Red Hat Ceph Storage Tools 1.3Fixed RHSA-2016:2994
Red Hat Ceph Storage Tools 2Fixed RHSA-2016:2954
Not affected: 4 products
  • Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)
  • Red Hat Enterprise Linux OpenStack Platform 6 (Juno)
  • Red Hat Enterprise Linux OpenStack Platform 6 (Juno) Installer
  • Red Hat OpenStack Platform 10 (Newton)

Timeline

  1. 2026-10-02 Threatist record created from CVE-2016-9579
  2. 2026-10-03 Alias added: GHSA-2594-xrq4-4jm3

References

Exploit 2

Advisory 4

  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2018-11213 Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass… CVSS 3.0CRITICAL 9.8
  • TI-2022-09605 An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. CVSS 3.1CRITICAL 9.8
  • TI-2025-13566 Nodemailer: nodemailer: denial of service via crafted email address header CVSS 3.1HIGH 7.5
  • TI-2026-28834 jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers CVSS 4.0MEDIUM 6.9
  • TI-2023-26623 The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6… CVSS 3.1MEDIUM 5.9
See all 45 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences