It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-16846.json"