Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 10 | ceph | 12.2.11+dfsg1-2.1+deb10u1 |
Vulnerabilities 12
-
High 7.5
A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated…
-
Medium 6.5
A flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects. An authenticated attacker can …
-
Medium 6.5CVE-2023-43040 Public exploit
IBM Spectrum Fusion HCI improper access control
IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.
-
Medium 5.8
A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This fla…
-
Medium 5.4
A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injecti…
-
Unscored —
An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by…
-
Unscored —
A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text. This can be …
-
Unscored —
User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential p…
-
Unscored —
An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles CEPHX_GET_AUTH_SESSION_KE…
-
Unscored —
A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21. The vulnerabilit…
-
Unscored —
A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a GET Request for a swift …
-
Unscored —
A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectl…