Input validation error in Ceph - CVE-2021-3531

Vulnerability identifier: #VU53311

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-3531

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input when processing HTTP GET requests. A remote attacker can send a request to the swift URL that ends with two slashes it can cause the rgw to crash.

Ceph
SUSE Manager Retail Branch Server
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Server
SUSE MicroOS
SUSE Enterprise Storage
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
Fedora
cephadm-ansible (Red Hat package)
tcmu-runner (Red Hat package)
ceph-iscsi (Red Hat package)
python-rsa (Red Hat package)
ceph-ansible (Red Hat package)
ceph
python3-rados-debuginfo
python3-ceph-argparse
python3-rbd
python3-rbd-debuginfo
python3-rgw
python3-rgw-debuginfo
rados-objclass-devel
ceph-base
ceph-base-debuginfo
ceph-fuse
ceph-fuse-debuginfo
python3-rados
python3-cephfs-debuginfo
python3-cephfs
ceph-mgr-debuginfo
librgw2-debuginfo
librgw2
librgw-devel
librbd1-debuginfo
librbd1
librbd-devel
libradospp-devel
rbd-fuse
ceph-prometheus-alerts
ceph-mgr-rook
ceph-mgr-diskprediction-local
ceph-mgr-dashboard
ceph-grafana-dashboards
rbd-nbd-debuginfo
rbd-nbd
rbd-mirror-debuginfo
rbd-mirror
rbd-fuse-debuginfo
ceph-mds
cephfs-shell
ceph-radosgw-debuginfo
ceph-radosgw
ceph-osd-debuginfo
ceph-osd
ceph-mon-debuginfo
ceph-mon
libcephfs2-debuginfo
ceph-mgr
ceph-mds-debuginfo
librados2
librados-devel-debuginfo
librados-devel
librados2-debuginfo
libcephfs2
libcephfs-devel
ceph-debugsource
ceph-common-debuginfo
ceph-common
cephadm
python3-ceph-common
ceph (Red Hat package)
Red Hat Ceph Storage

Install updates from vendor's website.

Ceph - addressed in versions 14.2.21, 15.2.12, 16.2.4
cephadm-ansible (Red Hat package) - update to 0.1-4.g6754c10.el8cp
tcmu-runner (Red Hat package) - update to 1.5.4-4.el8cp
ceph-iscsi (Red Hat package) - update to 3.5-2.el8cp
python-rsa (Red Hat package) - update to 4.8-1.el8cp
Red Hat Ceph Storage - update to 5.1
ceph-ansible (Red Hat package) - update to 6.0.25.4-1.el8cp
ceph - addressed in versions 14.2.21-1.fc32, 15.2.12-1.fc33, 16.2.4-1.fc34
python3-rados-debuginfo - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
python3-ceph-argparse - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
python3-rbd - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
python3-rbd-debuginfo - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
python3-rgw - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
python3-rgw-debuginfo - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
rados-objclass-devel - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
ceph - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-base - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
ceph-base-debuginfo - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
ceph-fuse - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-fuse-debuginfo - update to 14.2.21.403+g69ab6ea274d-3.63.1
python3-rados - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
python3-cephfs-debuginfo - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
python3-cephfs - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
ceph-mgr-debuginfo - update to 14.2.21.403+g69ab6ea274d-3.63.1
librgw2-debuginfo - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
librgw2 - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
librgw-devel - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
librbd1-debuginfo - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
librbd1 - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
librbd-devel - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
libradospp-devel - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
rbd-fuse - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-prometheus-alerts - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-mgr-rook - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-mgr-diskprediction-local - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-mgr-dashboard - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-grafana-dashboards - update to 14.2.21.403+g69ab6ea274d-3.63.1
rbd-nbd-debuginfo - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
rbd-nbd - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
rbd-mirror-debuginfo - update to 14.2.21.403+g69ab6ea274d-3.63.1
rbd-mirror - update to 14.2.21.403+g69ab6ea274d-3.63.1
rbd-fuse-debuginfo - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-mds - update to 14.2.21.403+g69ab6ea274d-3.63.1
cephfs-shell - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-radosgw-debuginfo - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-radosgw - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-osd-debuginfo - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-osd - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-mon-debuginfo - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-mon - update to 14.2.21.403+g69ab6ea274d-3.63.1
libcephfs2-debuginfo - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
ceph-mgr - update to 14.2.21.403+g69ab6ea274d-3.63.1
ceph-mds-debuginfo - update to 14.2.21.403+g69ab6ea274d-3.63.1
librados2 - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
librados-devel-debuginfo - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
librados-devel - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
librados2-debuginfo - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
libcephfs2 - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
libcephfs-devel - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
ceph-debugsource - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
ceph-common-debuginfo - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
ceph-common - addressed in versions 14.2.21.403+g69ab6ea274d-3.63.1, 15.2.12.83+g528da226523-3.25.1
cephadm - update to 15.2.12.83+g528da226523-3.25.1
python3-ceph-common - update to 15.2.12.83+g528da226523-3.25.1
ceph (Red Hat package) - update to 16.2.7-98.el8cp

• http://seclists.org/oss-sec/2021/q2/141
• https://github.com/ceph/ceph/commit/f44a8ae8aa27ecef69528db9aec220f12492810e

• Denial of service in Ceph
• Fedora 34 update for ceph
• Fedora 33 update for ceph
• Fedora 32 update for ceph
• Multiple vulnerabilities in Red Hat Ceph Storage 5
• SUSE update for ceph
• SUSE update for ceph