A flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects. An authenticated attacker can abuse this flaw by making multiple disconnect attempts resulting in a permanent leak of a socket connection by radosgw. This flaw could lead to a denial of service condition by pile up of CLOSE_WAIT sockets, eventually leading to the exhaustion of available resources, preventing legitimate users from connecting to the system.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ceph ceph - |
||
redhat openshift container storage 4.2 |
||
opensuse leap 15.1 |
||
canonical ubuntu linux 18.04 |
||
canonical ubuntu linux 19.10 |
Vulmon