Description
A flaw was found in Red Hat Ceph Storage version 3 in the way the Ceph RADOS Gateway daemon handles S3 requests. An authenticated attacker can abuse this flaw by causing a remote denial of service by sending a specially crafted HTTP Content-Length header to the Ceph RADOS Gateway server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Ceph Storage | version 3 (upstream versions of Ceph are not affected) | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Ceph Storage 3 | ceph +24 | 2:12.2.12-84.el7cp | RHSA-2019:4353 |
| Red Hat Ceph Storage 3 | ceph-ansible | 3.2.38-1.el7cp | RHSA-2019:4353 |
| Red Hat Ceph Storage 3 | cephmetrics +1 | 2.0.9-1.el7cp | RHSA-2019:4353 |
Advisories 1
- RHSA-2019:4353 Red Hat Security Advisory: Red Hat Ceph Storage security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 29, 2026