tocsin

Debian/ceph: medium 6.5

A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by providing a null URL to crash the RGW, causing a denial of service.

Action: Upgrade ceph to 16.2.10+ds-5 or later.

Affected

introducedfixedlast affected
016.2.10+ds-5-

Fixed versions

16.2.10+ds-5

Sources

published · modified · JSON