REDHAT-BUG-1515872: Medium severity ceph Ceph vulnerability
Published Nov 21, 2017
·Updated
A flaw was discovered in ceph. Assertion in rgwiampolicy.cc can be reached by user input and fail through data passed in from a rest call causing it to crash.
Upstream patch:
https://github.com/ceph/ceph/commit/b3118cabb8060a8cc6a01c4e8264cb18e7b1745a
Affected Software
1 affected component
ceph Ceph
Event History
Nov 21, 2017
Data Sourced
02:10 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-1515872?
The severity of REDHAT-BUG-1515872 is classified as critical due to its potential to crash the application.
2
How do I fix REDHAT-BUG-1515872?
To fix REDHAT-BUG-1515872, apply the upstream patch provided in the commit.
3
What component is affected by REDHAT-BUG-1515872?
The affected component in REDHAT-BUG-1515872 is the Ceph object storage system.
4
Who is impacted by REDHAT-BUG-1515872?
Users of the Ceph storage system are impacted by the vulnerability described in REDHAT-BUG-1515872.
5
What is the nature of the flaw in REDHAT-BUG-1515872?
The flaw in REDHAT-BUG-1515872 is a crash caused by user input reaching an assertion in the rgw_iam_policy.cc file.