A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph RGW server by sending valid HTTP headers and terminating the connection, resulting in a remote denial of service for Ceph RGW clients.
Metrics
Affected Vendors & Products
Advisories
Source | ID | Title |
---|---|---|
![]() |
DLA-3629-1 | ceph security update |
![]() |
EUVD-2019-2235 | A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph RGW server by sending valid HTTP headers and terminating the connection, resulting in a remote denial of service for Ceph RGW clients. |
![]() |
USN-4112-1 | Ceph vulnerability |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.

Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2025-02-13T16:27:22.017Z
Reserved: 2019-03-27T00:00:00.000Z
Link: CVE-2019-10222

No data.

Status : Modified
Published: 2019-11-08T15:15:11.437
Modified: 2024-11-21T04:18:41.467
Link: CVE-2019-10222


No data.