A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a GET Request for a swift URL that ends with two slashes...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a GET Request for a swift URL that ends with two slashes it can cause the rgw to crash, resulting in a denial of service. The greatest threat to the system is of availability.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 ceph

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.21-1"}]}]

Debian:13 ceph

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.21-1"}]}]

Debian:14 ceph

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.21-1"}]}]

参照URL

advisory security-tracker.debian.org