Denial of Service Vulnerability in Ceph RGW by Red Hat

CVE-2019-10222

What is CVE-2019-10222?

A flaw exists in the Ceph RGW configuration that uses Beast as the front end for handling client requests. An unauthenticated attacker can exploit this flaw by sending valid HTTP headers and immediately terminating the connection. This action can lead to a crash of the Ceph RGW server, resulting in a denial of service for users attempting to connect through the Ceph RGW interface.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References