CVE-2018-7262

Name of the Vulnerable Software and Affected Versions Ceph versions prior to 12.2.3 Ceph versions 13.x through 13.0.1

Description The issue arises from the improper handling of malformed HTTP headers by the rgw civetweb.cc RGWCivetWeb::init env function in radosgw, leading to a denial of service.

Recommendations For versions prior to 12.2.3, update to version 12.2.3 or later. For versions 13.x through 13.0.1, update to a version later than 13.0.1. As a temporary workaround, consider restricting access to the radosgw service to minimize the risk of exploitation.