Format String Vulnerability in Ceph's Libradosstriper Library
CVE-2017-7519

2.3LOW

Key Information:

Vendor

[unknown]

Status
Ceph
Vendor
CVE Published:
27 July 2018

What is CVE-2017-7519?

A format string vulnerability exists in Ceph's libradosstriper library, which arises from improper parsing of user input. An attacker may exploit this flaw to cause applications or services dependent on libradosstriper to crash, leading to service disruption and potential data loss. It is crucial for users of affected versions to apply the latest security updates to mitigate these risks.

Affected Version(s)

ceph

References

http://www.securityfocus.com/bid/99075
vdb-entryx_refsource_BID
https://www.debian.org/security/2018/dsa-4339
vendor-advisoryx_refsource_DEBIAN
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7519
x_refsource_CONFIRM

CVSS V3.1

Score:
2.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.