EUVD-2016-7916

Malware in sbrugna...

USN-3452-1: Ceph vulnerabilities

It was discovered that Ceph incorrectly handled the handlecommand function. A remote authenticated user could use this issue to cause Ceph to crash, resulting in a denial of service. CVE-2016-5009 Rahul Aggarwal discovered that Ceph incorrectly handled the authenticated-read ACL. A remote attacke...

CVE-2016-7031

The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows remote attackers to list the bucket contents via a URL...

CVE-2016-7031

The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows remote attackers to list the bucket contents via a URL...

PT-2016-7186

Name of the Vulnerable Software and Affected Versions Ceph versions prior to 10.0.1 Description The issue allows remote attackers to list the bucket contents via a URL when authenticated-read ACL is applied to a bucket. Recommendations For versions prior to 10.0.1, update to version 10.0.1 or lat...