3424 matches found
ceph: secure mode of msgr2 breaks both confidentiality and integrity aspects for long-lived sessions
A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious...
Ubuntu: Security Advisory (USN-4528-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4528-1: Ceph vulnerabilities
Adam Mohammed discovered that Ceph incorrectly handled certain CORS ExposeHeader tags. A remote attacker could possibly use this issue to preform an HTTP header injection attack. CVE-2020-10753 Lei Cao discovered that Ceph incorrectly handled certain POST requests with invalid tagging XML. A remo...
Ubuntu 16.04 LTS / 18.04 LTS : Ceph vulnerabilities (USN-4528-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4528-1 advisory. Adam Mohammed discovered that Ceph incorrectly handled certain CORS ExposeHeader tags. A remote attacker could possibly use this issue to...
PT-2021-3604 · Red Hat +5 · Red Hat Ceph Storage Radosgw +5
Name of the Vulnerable Software and Affected Versions: Red Hat Ceph Storage RadosGW Ceph Object Gateway versions prior to 14.2.21 Description: A flaw was found in the Red Hat Ceph Storage RadosGW related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the...
PT-2021-5463 · Red Hat +5 · Red Hat Ceph Storage +5
Name of the Vulnerable Software and Affected Versions: Red Hat Ceph Storage RGW versions prior to 14.2.21 Description: The issue is related to incorrect handling of a URL that ends with two slashes, which can cause the system to crash, resulting in a denial of service. This can be exploited by a...
PT-2021-5763
Name of the Vulnerable Software and Affected Versions ceph versions prior to 14.2.20 Description The issue is related to a flaw in the authentication procedure of the ceph storage network, which can be exploited by a remote attacker to access confidential data, compromise data integrity, and caus...
Huawei EulerOS: Security Advisory for ceph (EulerOS-SA-2020-1839)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : ceph (EulerOS-SA-2020-1839)
According to the version of the ceph packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer...
ceph: radosgw: HTTP header injection via CORS ExposeHeader tag
A flaw was found in the Red Hat Ceph Storage RadosGW Ceph Object Gateway. The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the...
Moderate: Red Hat Security Advisory: Red Hat Ceph Storage 3.3 security and bug fix update
Updated packages that fixes one security issue and multiple bugs are now available for Red Hat Ceph Storage 3.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...
ceph: radosgw: HTTP header injection via CORS ExposeHeader tag
A flaw was found in the Red Hat Ceph Storage RadosGW Ceph Object Gateway. The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the...
Moderate: Red Hat Security Advisory: Red Hat Ceph Storage 3.3 Security update
An update is now available for Red Hat Ceph Storage 3.3 on Ubuntu 16.04. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
RHEL 7 : Red Hat Ceph Storage 3.3 (RHSA-2020:3504)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3504 advisory. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a...
AZL-40962 CVE-2020-24371 affecting package ceph for versions less than 18.2.2-3
lgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectgarbage...
Information Disclosure
ceph is vulnerable to information disclosure. A flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects. An authenticated attacker can abuse this flaw by making multiple disconnect attempts resulting in a permanent leak of a socket connection by radosgw. This flaw...
Nonce Reuse
ceph is vulnerable to nonce reuse in the secure mode of the messenger v2 protocol. It allows an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality...
Directory Traversal
ceph is vulnerable to directory traversal. An unauthenticated attacker is able to exploit the vulnerability to cause information disclosure on the host machine running the Ceph dashboard...
Cross-Site Scripting (XSS)
ceph is vulnerable to cross-site scripting XSS. Header-splitting in RGW GetObject allows an attacker to inject and execute arbitrary Javascript in a user's browser...