CVE-2020-1700

Name	CVE-2020-1700
Description	A flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects. An authenticated attacker can abuse this flaw by making multiple disconnect attempts resulting in a permanent leak of a socket connection by radosgw. This flaw could lead to a denial of service condition by pile up of CLOSE_WAIT sockets, eventually leading to the exhaustion of available resources, preventing legitimate users from connecting to the system.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
ceph (PTS)	stretch	10.2.11-2	fixed
	stretch (security)	10.2.11-2+deb9u1	fixed
	buster	12.2.11+dfsg1-2.1	vulnerable
	bullseye	14.2.21-1	fixed
	bookworm, sid	16.2.7+ds-4	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version
ceph	source	jessie	(not affected)
ceph	source	stretch	(not affected)
ceph	source	(unstable)	14.2.7-1

Notes

[buster] - ceph <no-dsa> (Minor issue)
[stretch] - ceph <not-affected> (Vulnerable code introduced later)
[jessie] - ceph <not-affected> (Vulnerable code introduced later)
https://tracker.ceph.com/issues/42531
https://github.com/ceph/ceph/pull/33017
https://github.com/ceph/ceph/commit/ff72c50a2c43c57aead933eb4903ad1ca6d1748a