CVE-2020-12059
Fixed in a distro release EPSS 2%
An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception.
Products: linuxfoundation ceph, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 10 | ceph | 12.2.11+dfsg1-2.1+deb10u1 |
| Debian 12 | ceph | 14.2.4-1 |
| Debian 13 | ceph | 14.2.4-1 |
| Debian 14 | ceph | 14.2.4-1 |
| Red Hat ceph storage 3 | ceph | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | ceph-ansible | 0:3.2.56-1.el7cp |
| Red Hat ceph storage 3 | ceph-base | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | ceph-common | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | ceph-debuginfo | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | ceph-fuse | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | ceph-mds | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | ceph-mgr | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | ceph-mon | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | ceph-osd | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | ceph-radosgw | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | ceph-selinux | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | ceph-test | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | cephmetrics | 0:2.0.10-1.el7cp |
| Red Hat ceph storage 3 | cephmetrics-ansible | 0:2.0.10-1.el7cp |
| Red Hat ceph storage 3 | grafana | 0:5.2.4-3.el7cp |
| Red Hat ceph storage 3 | libcephfs-devel | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | libcephfs2 | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | librados-devel | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | librados2 | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | libradosstriper1 | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | librbd-devel | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | librbd1 | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | librgw-devel | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | librgw2 | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | python-cephfs | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | python-rados | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | python-rbd | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | python-rgw | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | rbd-mirror | 2:12.2.12-139.el7cp |
| Red Hat ceph storage 3 | tcmu-runner | 0:1.4.0-3.el7cp |
| Red Hat ceph storage 3 | tcmu-runner-debuginfo | 0:1.4.0-3.el7cp |
| SUSE Enterprise Storage 5 | ceph | 12.2.12+git.1587570958.35d78d0243-2.45.1 |
| SUSE HPE Helion OpenStack 8 | ceph | 12.2.12+git.1587570958.35d78d0243-2.45.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | ceph | 12.2.12+git.1587570958.35d78d0243-2.45.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | ceph | 12.2.12+git.1587570958.35d78d0243-2.45.1 |
| SUSE Linux Enterprise Server 12 SP4 | ceph | 12.2.12+git.1587570958.35d78d0243-2.45.1 |
| SUSE Linux Enterprise Server 12 SP5 | ceph | 12.2.12+git.1587570958.35d78d0243-2.45.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | ceph | 12.2.12+git.1587570958.35d78d0243-2.45.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | ceph | 12.2.12+git.1587570958.35d78d0243-2.45.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | ceph | 12.2.12+git.1587570958.35d78d0243-2.45.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | ceph | 12.2.12+git.1587570958.35d78d0243-2.45.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | ceph | 12.2.12+git.1587570958.35d78d0243-2.45.1 |
| SUSE OpenStack Cloud 8 | ceph | 12.2.12+git.1587570958.35d78d0243-2.45.1 |
| SUSE OpenStack Cloud Crowbar 8 | ceph | 12.2.12+git.1587570958.35d78d0243-2.45.1 |
| Ubuntu 16.04 LTS | ceph | 10.2.11-0ubuntu0.16.04.3 |
| Ubuntu 18.04 LTS | ceph | 12.2.13-0ubuntu0.18.04.4 |