Socket Connection Leak in Ceph RGW Beast Front-end by Red Hat

CVE-2020-1700

What is CVE-2020-1700?

A vulnerability exists in the Ceph RGW Beast front-end that improperly handles unexpected disconnects. An authenticated attacker can exploit this flaw by initiating multiple disconnect attempts, ultimately causing a permanent leak of socket connections managed by radosgw. This could lead to a Denial of Service situation, as the accumulation of CLOSE_WAIT sockets results in resource exhaustion, hindering legitimate users from accessing the system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References