A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph RGW server by sending valid HTTP headers and terminating the connection, resulting in a remote denial of service for Ceph RGW clients.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cephUpgrade ceph16 | Aug 22, 2024 | Nov 8, 2019 |
| Centos_linux | — | Upgrade libcephfs2Upgrade librgw-develUpgrade libcephfs-develUpgrade ceph-commonUpgrade ceph-baseUpgrade librados-develUpgrade rbd-mirrorUpgrade librbd-develUpgrade python-rgwUpgrade librgw2Upgrade ceph-fuseUpgrade python-cephfsUpgrade ceph-selinuxUpgrade ceph-debuginfoUpgrade ceph-mdsUpgrade libradosstriper1Upgrade ceph-radosgw | Mar 2, 2020 | Nov 8, 2019 |
| Debian | — | Upgrade ceph | Oct 25, 2023 | Nov 8, 2019 |
| Redhat_linux | — | Upgrade python-cephfsUpgrade ceph-baseUpgrade python-rgwUpgrade ceph-selinuxUpgrade ceph-debuginfoUpgrade libradosstriper1Upgrade ceph-fuseUpgrade rbd-mirrorUpgrade ceph-commonUpgrade ceph-radosgwUpgrade libcephfs2Upgrade librbd-develUpgrade librgw-develUpgrade libcephfs-develUpgrade librgw2Upgrade librados-develUpgrade ceph-mds | Mar 2, 2020 | Nov 8, 2019 |
| Suse | — | Upgrade librados-develUpgrade rados-objclass-develUpgrade libcephfs-develUpgrade librbd-develUpgrade librbd1Upgrade librgw2Upgrade rbd-nbdUpgrade librados2Upgrade python3-radosUpgrade librgw-develUpgrade ceph-commonUpgrade python3-ceph-commonUpgrade python3-cephfsUpgrade python3-ceph-argparseUpgrade libcephfs2Upgrade libradospp-develUpgrade python3-rgwUpgrade python3-rbd | Feb 4, 2022 | Aug 29, 2019 |
| Ubuntu | — | Upgrade cephUpgrade radosgw | Aug 30, 2019 | Aug 29, 2019 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub