A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph RGW server by sending valid HTTP headers and terminating the connection, resulting in a remote denial of service for Ceph RGW clients.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cephUpgrade ceph16 | Aug 22, 2024 | Nov 8, 2019 |
| Centos_linux | — | Upgrade librbd-develUpgrade ceph-selinuxUpgrade librgw2Upgrade ceph-radosgwUpgrade rbd-mirrorUpgrade python-rgwUpgrade libradosstriper1Upgrade python-cephfsUpgrade ceph-mdsUpgrade ceph-fuseUpgrade ceph-debuginfoUpgrade librados-develUpgrade libcephfs2Upgrade librgw-develUpgrade ceph-baseUpgrade ceph-commonUpgrade libcephfs-devel | Mar 2, 2020 | Nov 8, 2019 |
| Debian | — | Upgrade ceph | Oct 25, 2023 | Nov 8, 2019 |
| Redhat_linux | — | Upgrade python-cephfsUpgrade python-rgwUpgrade ceph-baseUpgrade ceph-selinuxUpgrade rbd-mirrorUpgrade ceph-debuginfoUpgrade libradosstriper1Upgrade ceph-fuseUpgrade librbd-develUpgrade ceph-mdsUpgrade librgw-develUpgrade librgw2Upgrade libcephfs-develUpgrade libcephfs2Upgrade ceph-radosgwUpgrade librados-develUpgrade ceph-common | Mar 2, 2020 | Nov 8, 2019 |
| Suse | — | Upgrade librados-develUpgrade librgw-develUpgrade librgw2Upgrade librados2Upgrade python3-cephfsUpgrade rbd-nbdUpgrade libcephfs2Upgrade python3-ceph-argparseUpgrade librbd-develUpgrade ceph-commonUpgrade python3-ceph-commonUpgrade python3-radosUpgrade libcephfs-develUpgrade rados-objclass-develUpgrade librbd1Upgrade python3-rbdUpgrade python3-rgwUpgrade libradospp-devel | Feb 4, 2022 | Aug 29, 2019 |
| Ubuntu | — | Upgrade cephUpgrade radosgw | Aug 30, 2019 | Aug 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub