Medium severity6.5NVD Advisory· Published Jul 12, 2016· Updated Jun 17, 2026
CVE-2016-5009
CVE-2016-5009
Description
The handle_command function in mon/Monitor.cc in Ceph allows remote authenticated users to cause a denial of service (segmentation fault and ceph monitor crash) via an (1) empty or (2) crafted prefix.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
14- cpe:2.3:a:redhat:ceph_storage_mon:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:ceph_storage_osd:1.3:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
- osv-coords6 versionspkg:rpm/suse/ceph&distro=SUSE%20Enterprise%20Storage%203pkg:rpm/suse/ceph&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2pkg:rpm/suse/ceph&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2pkg:rpm/suse/ceph&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2pkg:rpm/suse/ceph&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/ceph&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2
< 10.2.3+git.1475228057.755cf99-7.3+ 5 more
- (no CPE)range: < 10.2.3+git.1475228057.755cf99-7.3
- (no CPE)range: < 10.2.4+git.1481215985.12b091b-16.2
- (no CPE)range: < 10.2.4+git.1481215985.12b091b-16.2
- (no CPE)range: < 10.2.4+git.1481215985.12b091b-16.2
- (no CPE)range: < 10.2.4+git.1481215985.12b091b-16.2
- (no CPE)range: < 10.2.4+git.1481215985.12b091b-16.2
Patches
Vulnerability mechanics
References
6News mentions
0No linked articles in our index yet.