A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph RGW server by sending valid HTTP headers and terminating the connection, resulting in a remote denial of service for Ceph RGW clients.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cephUpgrade ceph16 | Aug 22, 2024 | Nov 8, 2019 |
| Centos_linux | — | Upgrade python-rgwUpgrade rbd-mirrorUpgrade ceph-radosgwUpgrade libradosstriper1Upgrade ceph-debuginfoUpgrade librgw2Upgrade librbd-develUpgrade ceph-fuseUpgrade ceph-mdsUpgrade ceph-selinuxUpgrade python-cephfsUpgrade libcephfs2Upgrade ceph-baseUpgrade ceph-commonUpgrade librados-develUpgrade librgw-develUpgrade libcephfs-devel | Mar 2, 2020 | Nov 8, 2019 |
| Debian | — | Upgrade ceph | Oct 25, 2023 | Nov 8, 2019 |
| Redhat_linux | — | Upgrade ceph-commonUpgrade librgw2Upgrade ceph-radosgwUpgrade librbd-develUpgrade librgw-develUpgrade librados-develUpgrade libcephfs2Upgrade ceph-mdsUpgrade libcephfs-develUpgrade ceph-fuseUpgrade python-rgwUpgrade rbd-mirrorUpgrade ceph-debuginfoUpgrade libradosstriper1Upgrade ceph-baseUpgrade python-cephfsUpgrade ceph-selinux | Mar 2, 2020 | Nov 8, 2019 |
| Suse | — | Upgrade python3-cephfsUpgrade libcephfs-develUpgrade ceph-commonUpgrade librgw-develUpgrade librados-develUpgrade librbd-develUpgrade librgw2Upgrade python3-ceph-argparseUpgrade librbd1Upgrade libcephfs2Upgrade rbd-nbdUpgrade librados2Upgrade rados-objclass-develUpgrade python3-radosUpgrade python3-ceph-commonUpgrade python3-rbdUpgrade python3-rgwUpgrade libradospp-devel | Feb 4, 2022 | Aug 29, 2019 |
| Ubuntu | — | Upgrade radosgwUpgrade ceph | Aug 30, 2019 | Aug 29, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub