Socket Connection Leak in Ceph RGW Beast Front-end by Red Hat

CVE-2020-1700

What is CVE-2020-1700?

A vulnerability exists in the Ceph RGW Beast front-end that improperly handles unexpected disconnects. An authenticated attacker can exploit this flaw by initiating multiple disconnect attempts, ultimately causing a permanent leak of socket connections managed by radosgw. This could lead to a Denial of Service situation, as the accumulation of CLOSE_WAIT sockets results in resource exhaustion, hindering legitimate users from accessing the system.

References