The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Grafana is an open-source platform for monitoring and observability.
Using public dashboards users can query multiple distinct data sources using mixed queries. However such query has a possibility of crashing a Grafana instance.
The only feature that uses mixed queries at the moment is public dashboards, but it's also possible to cause this by calling the query API directly.
This might enable malicious users to crash Grafana instances through that endpoint.
Users may upgrade to version 9.4.12 and 9.5.3 to receive a fix.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libradosstriper1Upgrade python3-rbd-debuginfoUpgrade cephfs-topUpgrade ceph-common-debuginfoUpgrade ceph-osd-debuginfoUpgrade ceph-debugsourceUpgrade python3-cephfs-debuginfoUpgrade ceph-mgr-debuginfoUpgrade ceph-exporter-debuginfoUpgrade ceph-mibUpgrade python3-rgwUpgrade ceph-radosgw-debuginfoUpgrade ceph-baseUpgrade cephadm-ansibleUpgrade ceph-mds-debuginfoUpgrade ceph-resource-agentsUpgrade rbd-mirror-debuginfoUpgrade python3-rgw-debuginfoUpgrade ceph-base-debuginfoUpgrade ceph-selinuxUpgrade rbd-nbd-debuginfoUpgrade ceph-test-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade libradospp-develUpgrade ceph-mon-debuginfoUpgrade python3-ceph-commonUpgrade ceph-debuginfoUpgrade ceph-commonUpgrade ceph-fuse-debuginfoUpgrade librados-devel-debuginfoUpgrade librgw2-debuginfoUpgrade librbd-develUpgrade libcephfs2-debuginfoUpgrade libcephsqlite-debuginfoUpgrade libradosstriper1-debuginfoUpgrade rbd-nbdUpgrade cephadmUpgrade ceph-fuseUpgrade python3-rados-debuginfoUpgrade libcephfs2Upgrade librados-develUpgrade python3-rbdUpgrade python3-radosUpgrade python3-ceph-argparseUpgrade librgw-develUpgrade ceph-immutable-object-cache-debuginfoUpgrade rbd-fuse-debuginfoUpgrade python3-cephfsUpgrade libcephfs-develUpgrade ceph-immutable-object-cacheUpgrade librgw2 | Dec 13, 2023 | Jun 6, 2023 |
| Freebsd | — | Upgrade grafana9Upgrade grafana | Jun 8, 2023 | Jun 7, 2023 |
| Redhat_linux | — | Upgrade librgw2Upgrade python3-ceph-commonUpgrade cephadm-ansibleUpgrade python3-rgwUpgrade ceph-exporter-debuginfoUpgrade ceph-base-debuginfoUpgrade ceph-test-debuginfoUpgrade ceph-mgr-debuginfoUpgrade rbd-mirror-debuginfoUpgrade python3-radosUpgrade python3-cephfs-debuginfoUpgrade libcephfs2Upgrade python3-ceph-argparseUpgrade ceph-mon-debuginfoUpgrade librados-develUpgrade ceph-debugsourceUpgrade python3-cephfsUpgrade librgw-develUpgrade ceph-radosgw-debuginfoUpgrade libcephfs2-debuginfoUpgrade rbd-fuse-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade rbd-nbd-debuginfoUpgrade libcephsqlite-debuginfoUpgrade ceph-resource-agentsUpgrade ceph-osd-debuginfoUpgrade ceph-immutable-object-cacheUpgrade libradosstriper1-debuginfoUpgrade ceph-selinuxUpgrade python3-rbd-debuginfoUpgrade python3-rbdUpgrade ceph-debuginfoUpgrade python3-rgw-debuginfoUpgrade cephfs-topUpgrade libradosstriper1Upgrade cephfs-mirror-debuginfoUpgrade ceph-baseUpgrade cephadmUpgrade python3-rados-debuginfoUpgrade librbd-develUpgrade ceph-mibUpgrade ceph-mds-debuginfoUpgrade ceph-commonUpgrade ceph-common-debuginfoUpgrade rbd-nbdUpgrade ceph-fuse-debuginfoNo solution existsUpgrade libradospp-develUpgrade librados-devel-debuginfoUpgrade libcephfs-develUpgrade librgw2-debuginfoUpgrade ceph-fuse | Dec 13, 2023 | Jun 6, 2023 |
| Suse | — | Upgrade grafana | Jul 21, 2023 | Jun 6, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub