Red Hat Security AdvisoryRHSA-2018:0546
ceph security update
Released 2018-03-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- 7Server-RHCEPH-3.0-MON ceph-2:12.2.1-46.el7cp, ceph-base-2:12.2.1-46.el7cp, ceph-common-2:12.2.1-46.el7cp +17
- 7Server-RHCEPH-3.0-OSD ceph-2:12.2.1-46.el7cp, ceph-base-2:12.2.1-46.el7cp, ceph-common-2:12.2.1-46.el7cp +16
- 7Server-RHCEPH-3.0-Tools ceph-2:12.2.1-46.el7cp, ceph-base-2:12.2.1-46.el7cp, ceph-common-2:12.2.1-46.el7cp +18
Fixes 1 record
Priority LOW 38
In Ceph before 12.2.3 and 13.x through 13.0.1, the rgw_civetweb.cc RGWCivetWeb::init_env function in radosgw doesn't handle malformed HTTP headers properly, allowing for denial of service.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02869 · Published 2018-03-19 · Fixed CWE-476
