A flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects. An authenticated attacker can abuse this flaw by making multiple disconnect attempts resulting in a permanent leak of a socket connection by radosgw. This flaw could lead to a denial of service condition by pile up of CLOSE_WAIT sockets, eventually leading to the exhaustion of available resources, preventing legitimate users from connecting to the system.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "ceph", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "ceph-base", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "ceph-base-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "ceph-common", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "ceph-common-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "ceph-fuse", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "ceph-fuse-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "ceph-mds", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "ceph-mds-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "ceph-mgr", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "ceph-mgr-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "ceph-mon", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "ceph-mon-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "ceph-osd", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "ceph-osd-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "ceph-resource-agents", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "ceph-test", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "ceph-test-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "libcephfs-dev", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "libcephfs-java", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "libcephfs-jni", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "libcephfs-jni-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "libcephfs2", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "libcephfs2-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "librados-dev", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "librados-dev-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "librados2", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "librados2-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "libradosstriper-dev", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "libradosstriper1", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "libradosstriper1-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "librbd-dev", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "librbd1", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "librbd1-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "librgw-dev", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "librgw2", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "librgw2-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "python-ceph", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "python-cephfs", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "python-cephfs-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "python-rados", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "python-rados-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "python-rbd", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "python-rbd-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "python-rgw", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "python-rgw-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "python3-ceph-argparse", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "python3-cephfs", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "python3-cephfs-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "python3-rados", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "python3-rados-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "python3-rbd", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "python3-rbd-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "python3-rgw", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "python3-rgw-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "rados-objclass-dev", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "radosgw", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "radosgw-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "rbd-fuse", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "rbd-fuse-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "rbd-mirror", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "rbd-mirror-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "rbd-nbd", "binary_version": "12.2.12-0ubuntu0.18.04.5" }, { "binary_name": "rbd-nbd-dbgsym", "binary_version": "12.2.12-0ubuntu0.18.04.5" } ] }