CVE-2020-1700

Reference Links

• http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00009.html
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1700
• https://usn.ubuntu.com/4304-1/
• https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html
• https://launchpad.net/bugs/cve/CVE-2020-1700
• https://tracker.ceph.com/issues/42531
• https://github.com/ceph/ceph/pull/33017
• https://github.com/ceph/ceph/commit/ff72c50a2c43c57aead933eb4903ad1ca6d1748a
• https://security-tracker.debian.org/tracker/CVE-2020-1700
• https://ubuntu.com/security/notices/USN-4304-1
• https://www.cve.org/CVERecord?id=CVE-2020-1700
• https://nvd.nist.gov/vuln/detail/CVE-2020-1700
• https://ubuntu.com/security/CVE-2020-1700

Parent vulnerabilities

(Appears in the following advisories)

• USN-4304-1

Frequently Asked Questions

• What is CVE-2020-1700?

  CVE-2020-1700 is a vulnerability that allows an authenticated attacker to abuse the way the Ceph RGW Beast front-end handles unexpected disconnects, resulting in a permanent leak of a socket connection and potentially leading to a denial of service.

• What is the severity of CVE-2020-1700?

  CVE-2020-1700 has a severity rating of 6.5, which is considered medium.

• Which software versions are affected by CVE-2020-1700?

  The following software versions are affected by CVE-2020-1700: ceph 12.2.12-0ubuntu0.18.04.5, ceph 14.2.4-0ubuntu0.19.10.2, ceph 14.2.7-1, Ceph Ceph, Redhat Openshift Container Storage 4.2, openSUSE Leap 15.1, Canonical Ubuntu Linux 18.04, and Canonical Ubuntu Linux 19.10.

• How can an authenticated attacker exploit CVE-2020-1700?

  An authenticated attacker can exploit CVE-2020-1700 by making multiple disconnect attempts, causing a permanent leak of a socket connection and potentially leading to a denial of service.

• Where can I find more information about CVE-2020-1700?

  You can find more information about CVE-2020-1700 at the following references: [Bugzilla](https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1700), [OpenSUSE security announcement](http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00009.html), and [Ubuntu security notice](https://usn.ubuntu.com/4304-1/).