CVE:CVE-2016-9579
CNNVD:CNNVD-201612-538
Red Hat Ceph是美国红帽（Red Hat）公司的一套Linux PB级分布式文件系统。该系统的主要目标是设计成基于POSIX（可移植操作系统接口）的没有单点故障的分布式文件系统，使数据能容错和无缝的复制。
Ceph 1.3.x版本和2.x版本存在输入验证错误漏洞，远程未经身份验证的攻击者可以利用此漏洞通过发送特制的跨源HTTP请求来导致拒绝服务。
solution:Upgrade redhat ceph_storage to a higher version than 1.3,2.0,and avoid the version 1.3,2.0; Upgrade redhat ceph_storage_mon to a higher version than 1.3,2,and avoid the version 1.3,2; Upgrade redhat ceph_storage_osd to a higher version than 1.3,2,and avoid the version 1.3,2; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0