Ceph vulnerability

2024-01-2900:00:00

ubuntu.com

ubuntu

ceph

vulnerability

authorization

post requests

file upload

6.8 Medium

AI Score

Confidence

High

JSON

Releases

Ubuntu 23.10
Ubuntu 22.04 LTS
Ubuntu 20.04 LTS
Ubuntu 18.04 ESM
Ubuntu 16.04 ESM
Ubuntu 14.04 ESM

Packages

ceph - distributed storage and file system

Details

Lucas Henry discovered that Ceph incorrectly handled specially
crafted POST requests. An uprivileged user could use this to
bypass Ceph’s authorization checks and upload a file to any bucket.

OSVersionArchitecturePackageVersionFilename
Ubuntu23.10noarchceph< 18.2.0-0ubuntu3.1UNKNOWN
Ubuntu23.10noarchceph-base< 18.2.0-0ubuntu3.1UNKNOWN
Ubuntu23.10noarchceph-base-dbgsym< 18.2.0-0ubuntu3.1UNKNOWN
Ubuntu23.10noarchceph-common< 18.2.0-0ubuntu3.1UNKNOWN
Ubuntu23.10noarchceph-common-dbgsym< 18.2.0-0ubuntu3.1UNKNOWN
Ubuntu23.10noarchceph-fuse< 18.2.0-0ubuntu3.1UNKNOWN
Ubuntu23.10noarchceph-fuse-dbgsym< 18.2.0-0ubuntu3.1UNKNOWN
Ubuntu23.10noarchceph-grafana-dashboards< 18.2.0-0ubuntu3.1UNKNOWN
Ubuntu23.10noarchceph-immutable-object-cache< 18.2.0-0ubuntu3.1UNKNOWN
Ubuntu23.10noarchceph-immutable-object-cache-dbgsym< 18.2.0-0ubuntu3.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	23.10	noarch	ceph	< 18.2.0-0ubuntu3.1	UNKNOWN
Ubuntu	23.10	noarch	ceph-base	< 18.2.0-0ubuntu3.1	UNKNOWN
Ubuntu	23.10	noarch	ceph-base-dbgsym	< 18.2.0-0ubuntu3.1	UNKNOWN
Ubuntu	23.10	noarch	ceph-common	< 18.2.0-0ubuntu3.1	UNKNOWN
Ubuntu	23.10	noarch	ceph-common-dbgsym	< 18.2.0-0ubuntu3.1	UNKNOWN
Ubuntu	23.10	noarch	ceph-fuse	< 18.2.0-0ubuntu3.1	UNKNOWN
Ubuntu	23.10	noarch	ceph-fuse-dbgsym	< 18.2.0-0ubuntu3.1	UNKNOWN
Ubuntu	23.10	noarch	ceph-grafana-dashboards	< 18.2.0-0ubuntu3.1	UNKNOWN
Ubuntu	23.10	noarch	ceph-immutable-object-cache	< 18.2.0-0ubuntu3.1	UNKNOWN
Ubuntu	23.10	noarch	ceph-immutable-object-cache-dbgsym	< 18.2.0-0ubuntu3.1	UNKNOWN