ISOMAN

CVE

CVE-2020-12059

An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception.

Severity
HIGH
CVSS
7.5
Published
Modified

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource

References

  1. https://bugzilla.suse.com/show_bug.cgi?id=1170170
  2. https://docs.ceph.com/docs/master/releases/mimic/
  3. https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html
  4. https://tracker.ceph.com/issues/44967
  5. https://usn.ubuntu.com/4528-1/
  6. https://bugzilla.suse.com/show_bug.cgi?id=1170170
  7. https://docs.ceph.com/docs/master/releases/mimic/
  8. https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html
  9. https://tracker.ceph.com/issues/44967
  10. https://usn.ubuntu.com/4528-1/