Red Hat · Ceph · CVE-2020-1700
**Name of the Vulnerable Software and Affected Versions**
Ceph (affected versions not specified)
**Description**
A flaw in the Ceph RGW Beast front-end's handling of unexpected disconnects allows an authenticated attacker to make multiple disconnect attempts, resulting in a permanent leak of a socket connection by radosgw. This can lead to a denial of service condition due to the accumulation of CLOSE WAIT sockets, eventually exhausting available resources and preventing legitimate users from connecting to the system. The vulnerability is related to an error in the resource control mechanism of the rgw::asio::ClientIO method in the rgw/rgw asio frontend.cc component of the Ceph storage system.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.