An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ceph | Linuxfoundation | * | 13.2.9 (including) |
| Red Hat Ceph Storage 3 - ELS | RedHat | ceph-2:12.2.12-139.el7cp | * |
| Red Hat Ceph Storage 3 - ELS | RedHat | ceph-ansible-0:3.2.56-1.el7cp | * |
| Red Hat Ceph Storage 3 - ELS | RedHat | cephmetrics-0:2.0.10-1.el7cp | * |
| Red Hat Ceph Storage 3 - ELS | RedHat | grafana-0:5.2.4-3.el7cp | * |
| Red Hat Ceph Storage 3 - ELS | RedHat | tcmu-runner-0:1.4.0-3.el7cp | * |
| Ceph | Ubuntu | bionic | * |
| Ceph | Ubuntu | trusty | * |
| Ceph | Ubuntu | upstream | * |