Database/Control plane, storage & DevOps

Ceph RADOS Gateway (RGW): A POST carrying malformed object-tagging XML dereferences a NULL pointer and kills the

CVE-2020-12059Control plane, storage & DevOpscurated

Impact

A POST carrying malformed object-tagging XML dereferences a NULL pointer and kills the gateway. One tenant can knock the shared S3 service over on demand with a single request.

Who can reach it

Any client able to send an HTTP POST to the RGW S3 endpoint.

What to do

Upgrade RGW past 13.2.9 and restart the radosgw daemons. Keep more than one gateway in the pool so a targeted crash does not become a full outage.

References

https://access.redhat.com/security/cve/CVE-2020-12059 https://nvd.nist.gov/vuln/detail/CVE-2020-12059

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.