Most recent entries from all

bdu:2021-03718

BIT-ceph-2020-12059

Affected: Bitnami: ceph

An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception.

cnvd-2020-33349

EUVD-2026-41060

fkie_cve-2020-12059

An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception.

GHSA-896g-qc8p-7wrp

An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception.

gsd-2020-12059

OESA-2021-1009 — ceph security update

Affected: openEuler:20.03-LTS: ceph, openEuler:20.03-LTS-SP1: ceph

Ceph is a massively scalable, open-source, distributed storage system that runs on commodity hardware and delivers object, block and file system storage.\r\n\r\n Security Fix(es):\r\n\r\n An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception.(CVE-2020-12059)\r\n\r\n

RHSA-2021:1518 — Red Hat Security Advisory: Red Hat Ceph Storage 3.3 Security and Bug Fix Update

ceph: specially crafted XML payload on POST requests leads to DoS by crashing RGW grafana: SSRF incorrect access control vulnerability allows unauthenticated users to make grafana send HTTP requests to any URL ceph: User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila tcmu-runner: SCSI target (LIO) write to any block on ILO backstore

UBUNTU-CVE-2020-12059

Affected: Ubuntu:18.04:LTS: ceph

An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception.