Skip to content
Fencer Vulns
medium 6.5

CVE-2016-8626 json

A flaw was found in Red Hat Ceph before 0.94.9-8.

published 2018-07-31 8 y ago modified 2026-06-17 4 mo ago also EUVD-2016-9471

cvss
6.5
version 3.0, CNA
cisa kev
Not listed
not in CISA's catalog
epss
2.3%
EPSS 2.3% chance of exploitation in 30 days, percentile 83%
public exploits
0
none known

Summary

A flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object Gateway handles POST object requests permits an authenticated attacker to launch a denial of service attack by sending null or specially crafted POST object requests.

Patch / fix

  • redhat ceph 0.94.3.9-8
  • ceph Debian 14, Debian 13, Debian 12 10.2.5-1

debian advisories DEBIAN-CVE-2016-8626

  • ceph Ubuntu 14.04 LTS 0.80.11-0ubuntu1.14.04.3

ubuntu advisories UBUNTU-CVE-2016-8626

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • ceph ceph storage 2 1:10.2.3-13.el7cp
  • librbd1 ceph storage 2 1:10.2.3-13.el7cp
  • librgw2 ceph storage 2 1:10.2.3-13.el7cp
  • ceph-mds ceph storage 2 1:10.2.3-13.el7cp
  • ceph-mon ceph storage 2 1:10.2.3-13.el7cp
  • ceph-osd ceph storage 2 1:10.2.3-13.el7cp
  • ceph-base ceph storage 2 1:10.2.3-13.el7cp
  • ceph-fuse ceph storage 2 1:10.2.3-13.el7cp

red hat advisories RHSA-2016:2815RHSA-2016:2847

  • ceph Enterprise Storage 3 10.2.5+git.1485186288.4e3c6c4-12.2
  • ceph-test Enterprise Storage 3 10.2.5+git.1485186288.4e3c6c4-12.2

suse advisories SUSE-SU-2017:0758-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2016-8626 updated cvss 6.5

Ceph: RGW Denial of Service by sending null or specially crafted POST object requests

  • Red Hat Ceph Storage 1.3 for Ubuntu
    fixed: vendor fix RHSA-2016:2848
  • Red Hat Ceph Storage 2 for Ubuntu
    fixed: vendor fix RHSA-2016:2816
  • Red Hat Ceph Storage MON 1.3 ceph 0.94.9-8.el7cp, librbd1 0.94.9-8.el7cp, ceph-mon 0.94.9-8.el7cp, ceph-test 0.94.9-8.el7cp, librados2 0.94.9-8.el7cp, python-rbd 0.94.9-8.el7cp, +3 more
    fixed: vendor fix RHSA-2016:2847
  • Red Hat Ceph Storage MON 2 ceph 10.2.3-13.el7cp, librbd1 10.2.3-13.el7cp, librgw2 10.2.3-13.el7cp, ceph-mon 10.2.3-13.el7cp, ceph-base 10.2.3-13.el7cp, ceph-test 10.2.3-13.el7cp, +8 more
    fixed: vendor fix RHSA-2016:2815
  • Red Hat Ceph Storage OSD 1.3 ceph 0.94.9-8.el7cp, librbd1 0.94.9-8.el7cp, ceph-osd 0.94.9-8.el7cp, ceph-test 0.94.9-8.el7cp, librados2 0.94.9-8.el7cp, python-rbd 0.94.9-8.el7cp, +3 more
    fixed: vendor fix RHSA-2016:2847
  • Red Hat Ceph Storage OSD 2 ceph 10.2.3-13.el7cp, librbd1 10.2.3-13.el7cp, librgw2 10.2.3-13.el7cp, ceph-osd 10.2.3-13.el7cp, ceph-base 10.2.3-13.el7cp, ceph-test 10.2.3-13.el7cp, +7 more
    fixed: vendor fix RHSA-2016:2815
  • Red Hat Ceph Storage Tools 1.3 ceph 0.94.9-8.el7cp, librbd1 0.94.9-8.el7cp, librados2 0.94.9-8.el7cp, python-rbd 0.94.9-8.el7cp, ceph-common 0.94.9-8.el7cp, ceph-radosgw 0.94.9-8.el7cp, +2 more
    fixed: vendor fix RHSA-2016:2847
  • Red Hat Ceph Storage Tools 2 ceph 10.2.3-13.el7cp, libntirpc 1.4.1-1.el7, librbd1 10.2.3-13.el7cp, librgw2 10.2.3-13.el7cp, ceph-mds 10.2.3-13.el7cp, ceph-base 10.2.3-13.el7cp, +15 more
    fixed: vendor fix RHSA-2016:2815
show 1 more
  • Red Hat OpenStack Foreman Ceph Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse) Ceph Red Hat Enterprise Linux OpenStack Platform 6 (Juno) Ceph
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

2.28% chance of exploitation in the next 30 days, higher than 83% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.0 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD 3.0 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD 2.0 6.8 AV:N/AC:L/Au:S/C:N/I:N/A:C

Affected products

  • Red Hat Ceph

Classification

Weakness
  • CWE-476 NULL Pointer Dereference
  • CWE-20 Improper Input Validation

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.