Vulnerabilities > CVE-2021-3531 - Reachable Assertion vulnerability in multiple products

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

LOW

network

low complexity

redhat

fedoraproject

CWE-617

NVD

Published: 2021-05-18

Updated: 2023-11-07

Summary

A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a GET Request for a swift URL that ends with two slashes it can cause the rgw to crash, resulting in a denial of service. The greatest threat to the system is of availability.

Vulnerable Configurations

Part	Description	Count
Application	Redhat Redhat Ceph Storage 4.0 Redhat Ceph 0.1 Redhat Ceph 0.2 Redhat Ceph 0.3 Redhat Ceph 0.4 Redhat Ceph 0.5 Redhat Ceph 0.6 Redhat Ceph 0.7 Redhat Ceph 0.7.1 Redhat Ceph 0.7.2 Redhat Ceph 0.7.3 Redhat Ceph 0.8 Redhat Ceph 0.9 Redhat Ceph 0.10 Redhat Ceph 0.11 Redhat Ceph 0.12 Redhat Ceph 0.13 Redhat Ceph 0.14 Redhat Ceph 0.15 Redhat Ceph 0.16 Redhat Ceph 0.16.1 Redhat Ceph 0.17 Redhat Ceph 0.18 Redhat Ceph 0.19 Redhat Ceph 0.19.1 Redhat Ceph 0.20 Redhat Ceph 0.20.1 Redhat Ceph 0.20.2 Redhat Ceph 0.21 Redhat Ceph 0.21.1 Redhat Ceph 0.21.2 Redhat Ceph 0.21.3 Redhat Ceph 0.22 Redhat Ceph 0.22.1 Redhat Ceph 0.22.2 Redhat Ceph 0.23 Redhat Ceph 0.23.1 Redhat Ceph 0.23.2 Redhat Ceph 0.24 Redhat Ceph 0.24.1 Redhat Ceph 0.24.2 Redhat Ceph 0.24.3 Redhat Ceph 0.25 Redhat Ceph 0.25.1 Redhat Ceph 0.25.2 Redhat Ceph 0.26 Redhat Ceph 0.27 Redhat Ceph 0.27.1 Redhat Ceph 0.28 Redhat Ceph 0.28.1 Redhat Ceph 0.28.2 Redhat Ceph 0.29 Redhat Ceph 0.29.1 Redhat Ceph 0.30 Redhat Ceph 0.31 Redhat Ceph 0.32 Redhat Ceph 0.33 Redhat Ceph 0.34 Redhat Ceph 0.35 Redhat Ceph 0.36 Redhat Ceph 0.37 Redhat Ceph 0.38 Redhat Ceph 0.39 Redhat Ceph 0.40 Redhat Ceph 0.41 Redhat Ceph 0.42 Redhat Ceph 0.42.1 Redhat Ceph 0.42.2 Redhat Ceph 0.43 Redhat Ceph 0.44 Redhat Ceph 0.44.1 Redhat Ceph 0.44.2 Redhat Ceph 0.45 Redhat Ceph 0.46 Redhat Ceph 0.47 Redhat Ceph 0.47.1 Redhat Ceph 0.47.2 Redhat Ceph 0.47.3 Redhat Ceph 0.48 Redhat Ceph 0.48.1 Redhat Ceph 0.48.2 Redhat Ceph 0.48.3 Redhat Ceph 0.49 Redhat Ceph 0.50 Redhat Ceph 0.51 Redhat Ceph 0.52 Redhat Ceph 0.53 Redhat Ceph 0.54 Redhat Ceph 0.55 Redhat Ceph 0.55.1 Redhat Ceph 0.56 Redhat Ceph 0.56.1 Redhat Ceph 0.56.2 Redhat Ceph 0.56.3 Redhat Ceph 0.56.4 Redhat Ceph 0.56.5 Redhat Ceph 0.56.6 Redhat Ceph 0.56.7 Redhat Ceph 0.57 Redhat Ceph 0.58 Redhat Ceph 0.59 Redhat Ceph 0.60 Redhat Ceph 0.61 Redhat Ceph 0.61.1 Redhat Ceph 0.61.2 Redhat Ceph 0.61.3 Redhat Ceph 0.61.4 Redhat Ceph 0.61.5 Redhat Ceph 0.61.6 Redhat Ceph 0.61.7 Redhat Ceph 0.61.8 Redhat Ceph 0.61.9 Redhat Ceph 0.62 Redhat Ceph 0.63 Redhat Ceph 0.64 Redhat Ceph 0.65 Redhat Ceph 0.66 Redhat Ceph 0.67 Redhat Ceph 0.67.1 Redhat Ceph 0.67.2 Redhat Ceph 0.67.3 Redhat Ceph 0.67.4 Redhat Ceph 0.67.5 Redhat Ceph 0.67.6 Redhat Ceph 0.67.7 Redhat Ceph 0.67.8 Redhat Ceph 0.67.9 Redhat Ceph 0.67.10 Redhat Ceph 0.67.11 Redhat Ceph 0.68 Redhat Ceph 0.69 Redhat Ceph 0.70 Redhat Ceph 0.71 Redhat Ceph 0.72 Redhat Ceph 0.72.1 Redhat Ceph 0.72.2 Redhat Ceph 0.73 Redhat Ceph 0.74 Redhat Ceph 0.75 Redhat Ceph 0.76 Redhat Ceph 0.77 Redhat Ceph 0.78 Redhat Ceph 0.79 Redhat Ceph 0.80 Redhat Ceph 0.80.1 Redhat Ceph 0.80.2 Redhat Ceph 0.80.3 Redhat Ceph 0.80.4 Redhat Ceph 0.80.5 Redhat Ceph 0.80.6 Redhat Ceph 0.80.7 Redhat Ceph 0.80.8 Redhat Ceph 0.80.8.1 Redhat Ceph 0.80.8.2 Redhat Ceph 0.80.8.4 Redhat Ceph 0.80.8.5 Redhat Ceph 0.80.9 Redhat Ceph 0.80.10 Redhat Ceph 0.80.11 Redhat Ceph 0.81 Redhat Ceph 0.82 Redhat Ceph 0.83 Redhat Ceph 0.84 Redhat Ceph 0.85 Redhat Ceph 0.86 Redhat Ceph 0.87 Redhat Ceph 0.87.1 Redhat Ceph 0.87.2 Redhat Ceph 0.88 Redhat Ceph 0.89 Redhat Ceph 0.90 Redhat Ceph 0.91 Redhat Ceph 0.92 Redhat Ceph 0.93 Redhat Ceph 0.94 Redhat Ceph 0.94.1 Redhat Ceph 0.94.1.1 Redhat Ceph 0.94.1.2 Redhat Ceph 0.94.1.3 Redhat Ceph 0.94.1.4 Redhat Ceph 0.94.1.5 Redhat Ceph 0.94.1.6 Redhat Ceph 0.94.1.7 Redhat Ceph 0.94.2 Redhat Ceph 0.94.3 Redhat Ceph 0.94.3.1 Redhat Ceph 0.94.3.2 Redhat Ceph 0.94.3.3 Redhat Ceph 0.94.4 Redhat Ceph 0.94.5 Redhat Ceph 0.94.6 Redhat Ceph 0.94.7 Redhat Ceph 0.94.8 Redhat Ceph 0.94.9 Redhat Ceph 0.94.10 Redhat Ceph 9.0.0 Redhat Ceph 9.0.1 Redhat Ceph 9.0.2 Redhat Ceph 9.0.3 Redhat Ceph 9.1.0 Redhat Ceph 9.2.0 Redhat Ceph 9.2.1 Redhat Ceph 10.0.0 Redhat Ceph 10.0.1 Redhat Ceph 10.0.2 Redhat Ceph 10.0.3 Redhat Ceph 10.0.4 Redhat Ceph 10.0.5 Redhat Ceph 10.1.0 Redhat Ceph 10.1.1 Redhat Ceph 10.1.2 Redhat Ceph 10.2.0 Redhat Ceph 10.2.01 Redhat Ceph 10.2.1 Redhat Ceph 10.2.2 Redhat Ceph 10.2.3 Redhat Ceph 10.2.4 Redhat Ceph 10.2.5 Redhat Ceph 10.2.6 Redhat Ceph 10.2.7 Redhat Ceph 10.2.8 Redhat Ceph 10.2.9 Redhat Ceph 10.2.10 Redhat Ceph 10.2.11 Redhat Ceph 11.0.0 Redhat Ceph 11.0.1 Redhat Ceph 11.0.2 Redhat Ceph 11.1.0 Redhat Ceph 11.1.1 Redhat Ceph 11.2.0 Redhat Ceph 11.2.1 Redhat Ceph 12.0.0 Redhat Ceph 12.0.1 Redhat Ceph 12.0.2 Redhat Ceph 12.0.3 Redhat Ceph 12.1.0 Redhat Ceph 12.1.1 Redhat Ceph 12.1.2 Redhat Ceph 12.1.3 Redhat Ceph 12.1.4 Redhat Ceph 12.2.0 Redhat Ceph 12.2.1 Redhat Ceph 12.2.2 Redhat Ceph 12.2.3 Redhat Ceph 12.2.4 Redhat Ceph 12.2.5 Redhat Ceph 12.2.6 Redhat Ceph 12.2.7 Redhat Ceph 12.2.8 Redhat Ceph 12.2.9 Redhat Ceph 12.2.10 Redhat Ceph 13.0.0 Redhat Ceph 13.0.1 Redhat Ceph 13.0.2 Redhat Ceph 13.1.0 Redhat Ceph 13.1.1 Redhat Ceph 13.2.0 Redhat Ceph 13.2.1 Redhat Ceph 13.2.2 Redhat Ceph 13.2.3 Redhat Ceph 13.2.4 Redhat Ceph 14.0.0 Redhat Ceph 14.0.1 Redhat Ceph 14.2.14 Redhat Ceph 14.2.15 Redhat Ceph 14.2.16 Redhat Ceph 14.2.17 Redhat Ceph 14.2.18 Redhat Ceph 14.2.19 Redhat Ceph 14.2.20	275
OS	Fedoraproject Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34	3

Common Weakness Enumeration (CWE)

CWE-617 - Reachable Assertion

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References