GSD-2022-1001040 ceph: fix inode reference leakage in ceph_get_snapdir()

ceph: fix inode reference leakage in cephgetsnapdir This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

GSD-2022-1001038 ceph: fix memory leak in ceph_readdir when note_last_dentry returns error

ceph: fix memory leak in cephreaddir when notelastdentry returns error This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

PT-2022-29656

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue concerns an inode reference leakage in the ceph get snapdir function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29311

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description A memory leak issue exists in the ceph readdir function when note last dentry returns an error. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29313

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to an inode reference leakage in the ceph get snapdir function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-29982

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description A memory leak issue exists in the ceph readdir function when note last dentry returns an error. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29981

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to an inode reference leakage in the ceph get snapdir function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29655

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description A memory leak issue exists in the ceph readdir function when note last dentry returns an error. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-30268

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description A memory leak issue exists in the ceph readdir function when note last dentry returns an error. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

Access Control Bypass

ceph is vulnerable to access control bypass. The vulnerability exists due to a flaw which allows key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks...

RHEL 7 : Red Hat Ceph Storage 3 Security and Bug Fix update (Important) (RHSA-2022:1394)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:1394 advisory. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a...

Important: Red Hat Security Advisory: Red Hat Ceph Storage 3 Security and Bug Fix update

An update is now available for Red Hat Ceph Storage 3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in...

ceph: Unauthorized global_id reuse in cephx

An authentication flaw was found in ceph. When the monitor handles CEPHXGETAUTHSESSIONKEY requests, it doesn't sanitize otherkeys, allowing key reuse. An attacker who can request a globalid can exploit the ability of any user to request a globalid previously associated with another user, as ceph...

Mageia: Security Advisory (MGASA-2022-0138)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2022-0138 Updated ceph packages fix security vulnerability

Updated ceph packages fix security vulnerabilities: the key length for encrypted devices created using ceph-volume is incorrect. This is due to a bug in cephvolume/util/encryption.py which is fixed by this new version. CVE-2021-3979...

Updated ceph packages fix security vulnerability

Updated ceph packages fix security vulnerabilities: the key length for encrypted devices created using ceph-volume is incorrect. This is due to a bug in cephvolume/util/encryption.py which is fixed by this new version. CVE-2021-3979...

RHEL 8 : Red Hat Ceph Storage 5.1 Security, Enhancement, and Bug Fix update (Moderate) (RHSA-2022:1174)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1174 advisory. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system...

gateway: radosgw: CRLF injection

A flaw was found in the Red Hat Ceph Storage RadosGW Ceph Object Gateway. The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when makin...

ceph: Ceph volume does not honour osd_dmcrypt_key_size

A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks...

Moderate: Red Hat Security Advisory: Red Hat Ceph Storage 5.1 Security, Enhancement, and Bug Fix update

Red Hat Ceph Storage 5.1 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the Reference...