Ceph RADOS Gateway (RGW): One malformed PUT kills the radosgw process. Sending an object copy with an empty

Impact

One malformed PUT kills the radosgw process. Sending an object copy with an empty x-amz-copy-source header crashes the daemon, so a single tenant can take the shared S3 endpoint offline for everyone and stall every training job that streams checkpoints or datasets through it.

Who can reach it

Any client that can send an HTTP request to the RGW S3 endpoint. Reachable without credentials, so a tenant compute node with network access to the gateway is enough.

What to do

Upgrade RGW past 19.2.3 and restart the radosgw daemons. Run more than one RGW behind a load balancer with health checks and process supervision so a crash of one gateway does not take the endpoint down.

References