Headline
CVE-2020-12059: Bug #44967: rgw:rgw crash when putting object tagging and post object with malformedXML - rgw
An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception.
rgw:rgw crash when putting object tagging and post object with malformedXML
Added by lei cao over 3 years ago. Updated over 3 years ago.
Description
When I call put object tagging or post object with tagging interface, I passed in the wrong XML parameter name, such as lowercase "tagging", this makes rgw process died.
History
#7 Updated by Abhishek Lekshmanan over 3 years ago
- Status changed from In Progress to Resolved
Fixed in mimic v13.2.10, since luminous is EOL and nautilus+ are unaffected, closing
Also available in: Atom PDF