CVE-2017-7519

LOW

Ceph - Denial of Service via Format String Vulnerability in libradosstriper

Title source: llm

Description

In Ceph, a format string flaw was found in the way libradosstriper parses input from user. A user could crash an application or service using the libradosstriper library.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/99075

Third Party Advisory vendor-advisory x_refsource_debian

https://www.debian.org/security/2018/dsa-4339

Exploit, Issue Tracking, Vendor Advisory x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7519

Scores

CVSS v3 2.3

EPSS 0.0050

EPSS Percentile 38.7%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Details

CWE

CWE-134

Status published

Products (2)

ceph/ceph

debian/debian_linux 10.0

Published Jul 27, 2018

Tracked Since Feb 18, 2026