Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 11 | ceph | 14.2.21-1+deb11u1 |
Vulnerabilities 4
-
Medium 6.5CVE-2023-43040 Public exploit
IBM Spectrum Fusion HCI improper access control
IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.
-
Medium 6.5
CephFS Permission Escalation Vulnerability in Ceph Fuse mounted FS
Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 through 19.2.2, an unprivileged user can escalate to root privileges in a ceph-fuse mounted CephFS by chmod 777 a directory owned by root to …
-
Unscored —
A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectl…
-
Unscored —
A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to roo…