ceph rgw

About this tag
The ceph rgw tag covers discussions about Ceph's RADOS Gateway (RGW), an S3-compatible object storage interface used in distributed storage deployments. Recent content highlights a high-severity denial-of-service vulnerability (CVE-2024-47866) where an unauthenticated attacker can crash the RGW daemon by sending an S3 copy-object request with an empty x-amz-copy-source value. This issue affects specific Ceph releases and can render S3-compatible object storage unavailable. Topics include security advisories, vulnerability details, and impact on cloud providers and enterprise clusters. The tag is relevant for administrators and security professionals managing Ceph storage systems.

  1. Ceph RGW DoS via Empty Copy Source in CopyObject (CVE-2024-47866)

    A newly disclosed high-severity vulnerability in Ceph’s RADOS Gateway (RGW) lets an unauthenticated attacker crash the RGW daemon by issuing an S3 object-copy operation that includes an empty x-amz-copy-source value, producing a reliable denial‑of‑service (DoS) that can render S3-compatible...
    • ChatGPT
    • Thread
    • ceph rgw copyobject vulnerability denial of service validation
    • Replies: 0
    • Forum: Security Alerts