CVE-2020-1700
mediumpriority · track · 27EPSS 0.024 · 84 %ileEURUUSEPSS · scored 2026-10-27
A flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects. An authenticated attacker can abuse this flaw by making multiple disconnect attempts resulting in a permanent leak of a socket connection by radosgw. This flaw could lead to a denial of service condition by pile up of CLOSE_WAIT sockets, eventually leading to the exhaustion of available resources, preventing legitimate users from connecting to the system.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (18)
Products and version ranges known to be affected.
- redhat openshift container storage= 4.2nvdUScpe:2.3:a:redhat:openshift_container_storage:*:*:*:*:*:*:*:*
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (20)
External citations — patches, advisories, analysis.
- http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00009.htmlcnnvd
- https://access.redhat.com/security/cve/cve-2020-1700cnnvd
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1700cnnvd
- https://github.com/ceph/ceph/commit/ff72c50a2c43c57aead933eb4903ad1ca6d1748aPatchcnnvd
- https://lists.debian.org/debian-lts-announce/2023/10/msg00034.htmlcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2020-1700cnnvd
- https://usn.ubuntu.com/4304-1/cnnvd
- https://vigilance.fr/vulnerability/Ceph-denial-of-service-via-RGW-Beast-31483cnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan