DoS vulnerability in Ceph storage platform affecting RGW daemon

CVE-2024-47866

What is CVE-2024-47866?

A vulnerability in the Ceph distributed storage platform allows an attacker to utilize the x-amz-copy-source argument to specify an empty string when putting an object. This action leads to the RGW daemon crashing, resulting in service interruption and rendering the storage platform unable to respond to requests. As of the latest information available, there are no patched versions to address this issue, putting affected systems at risk of potential denial of service.

References