Login
Log in using an SSO provider:
Fedora Account System
Red Hat Associate
Login using a Red Hat Bugzilla account
Forgot Password
Create an Account
Red Hat Bugzilla – Bug 2139925
Home
New
Search
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh94 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
[?]
This site requires JavaScript to be enabled to function correctly, please enable it.
Bug 2139925
(
CVE-2022-3854
) -
CVE-2022-3854
ceph: possible DoS issue in ceph URL processing on RGW backends
Summary:
CVE-2022-3854 ceph: possible DoS issue in ceph URL processing on RGW backends
Keywords
:
Security
Status
:
NEW
Alias:
CVE-2022-3854
Product:
Security Response
Classification:
Other
Component:
vulnerability
Sub Component:
---
Version:
unspecified
Hardware:
All
OS:
Linux
Priority:
medium
Severity:
medium
Target Milestone:
---
Assignee:
Nobody
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:
2139927
2139928
Blocks:
2139899
2175294
TreeView+
depends on
/
blocked
Reported:
2022-11-03 20:58 UTC by
Sage McTaggart
Modified:
2023-07-07 08:33 UTC (
History
)
CC List:
9 users
(
show
)
ahanwate
aoconnor
bniver
flucifre
gmeno
mbenjamin
mhackett
sostapov
vereddy
Fixed In Version:
Doc Type:
If docs needed, set a value
Doc Text:
A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by providing a null URL to crash the RGW, causing a denial of service.
Clone Of:
Environment:
Last Closed:
Embargoed:
Attachments
(Terms of Use)
Note
You need to
log in
before you can comment on or make changes to this bug.