An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ceph | Oct 25, 2023 | Apr 22, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade librbd1Upgrade python-radosUpgrade librados2Upgrade python-rbd | Aug 31, 2020 | Apr 22, 2020 |
| Suse | — | Upgrade python-radosUpgrade librbd-develUpgrade librbd1Upgrade python-rbdUpgrade libradosstriper1Upgrade python-cephfsUpgrade librados2Upgrade librgw2Upgrade python-rgwUpgrade libcephfs2Upgrade ceph-commonUpgrade librados-develUpgrade libcephfs-devel | May 7, 2020 | Apr 22, 2020 |
| Ubuntu | — | Upgrade ceph-commonUpgrade cephUpgrade ceph-base | Sep 23, 2020 | Apr 22, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 22, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub