PT-2018-17983
CVE-2018-7262
·
تاريخ النشر
2018-03-07
·
تاريخ التحديث
2019-02-04
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Ceph versions prior to 12.2.3
Ceph versions 13.x through 13.0.1
Description
The issue arises from the improper handling of malformed HTTP headers by the rgw civetweb.cc RGWCivetWeb::init env function in radosgw, leading to a denial of service.
Recommendations
For versions prior to 12.2.3, update to version 12.2.3 or later.
For versions 13.x through 13.0.1, update to a version later than 13.0.1.
As a temporary workaround, consider restricting access to the radosgw service to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾