USN-4304-1: Ceph vulnerability
Or Friedman discovered that Ceph incorrectly handled disconnects. A remote authenticated attacker could possibly use this issue to cause Ceph to consume resources, leading to a denial of service.
Affected Software
Frequently Asked Questions
What is the vulnerability ID for the Ceph vulnerability?
The vulnerability ID for the Ceph vulnerability is USN-4304-1.
Who discovered the Ceph vulnerability?
The Ceph vulnerability was discovered by Or Friedman.
What is the impact of the Ceph vulnerability?
The Ceph vulnerability can allow a remote authenticated attacker to cause a denial of service by consuming resources.
Which software versions are affected by the Ceph vulnerability?
The Ceph vulnerability affects versions 14.2.4-0ubuntu0.19.10.2 and 12.2.12-0ubuntu0.18.04.5 of the ceph, ceph-base, and ceph-common packages on Ubuntu 19.10 and Ubuntu 18.04.
How can I fix the Ceph vulnerability?
To fix the Ceph vulnerability, update the affected packages to version 14.2.4-0ubuntu0.19.10.2 for Ubuntu 19.10 or version 12.2.12-0ubuntu0.18.04.5 for Ubuntu 18.04.