Null Pointer Dereference Vulnerability in Ceph's RGW Process

CVE-2020-12059

Summary

A vulnerability has been identified in the Ceph RGW process which can be exploited through a POST request containing incorrectly formatted tagging XML. This malformed XML may trigger a NULL pointer exception, resulting in the crash of the RGW process. The issue has been acknowledged in versions up to 13.2.9, emphasizing the need for immediate updates and remedial actions to ensure system stability and security.

References