A flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects. An authenticated attacker can abuse this flaw by making multiple disconnect attempts resulting in a permanent leak of a socket connection by radosgw. This flaw could lead to a denial of service condition by pile up of CLOSE_WAIT sockets, eventually leading to the exhaustion of available resources, preventing legitimate users from connecting to the system.
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "ceph"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "ceph-base"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "ceph-common"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "ceph-fuse"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "ceph-mds"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "ceph-mgr"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "ceph-mon"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "ceph-osd"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "ceph-resource-agents"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "ceph-test"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "libcephfs-dev"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "libcephfs-java"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "libcephfs-jni"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "libcephfs2"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "librados-dev"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "librados2"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "libradosstriper-dev"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "libradosstriper1"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "librbd-dev"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "librbd1"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "librgw-dev"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "librgw2"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "python-ceph"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "python-cephfs"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "python-rados"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "python-rbd"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "python-rgw"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "python3-ceph-argparse"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "python3-cephfs"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "python3-rados"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "python3-rbd"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "python3-rgw"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "rados-objclass-dev"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "radosgw"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "rbd-fuse"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "rbd-mirror"
},
{
"binary_version": "12.2.12-0ubuntu0.18.04.5",
"binary_name": "rbd-nbd"
}
]
}