Launchpad.net

CVE 2018-16846

It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices.

CVE-2018-16846 (Candidate) is related to these bugs:

Bug #1810766: [SRU] ceph 13.2.4

		In	Importance	Status
1810766	[SRU] ceph 13.2.4	ceph (Ubuntu)	High	Fix Released
1810766	[SRU] ceph 13.2.4	ceph (Ubuntu Disco)	High	Fix Released
1810766	[SRU] ceph 13.2.4	ceph (Ubuntu Cosmic)	High	Fix Released
1810766	[SRU] ceph 13.2.4	Ubuntu Cloud Archive	Undecided	Fix Released
1810766	[SRU] ceph 13.2.4	Ubuntu Cloud Archive rocky	High	Fix Released

See the

CVE page on Mitre.org for more details.