The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket. A remote unauthenticated attacker could use this flaw to cause denial of service by sending a specially-crafted cross-origin HTTP request. Ceph branches 1.3.x and 2.x are affected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ceph | Jul 30, 2024 | Aug 1, 2018 |
| Redhat_linux | — | Upgrade ceph-debuginfoUpgrade ceph-commonUpgrade librgw2Upgrade libcephfs1-develUpgrade ceph-mdsUpgrade python-rbdUpgrade libcephfs1Upgrade ceph-radosgwUpgrade librgw2-develUpgrade rbd-mirrorUpgrade ceph-baseUpgrade ceph-selinuxUpgrade python-cephfsUpgrade python-radosUpgrade ceph-fuse | Dec 21, 2016 | Dec 15, 2016 |
| Suse | — | Upgrade librados2Upgrade python-rados-debuginfoUpgrade librados2-debuginfoUpgrade ceph-osd-debuginfoUpgrade ceph-common-debuginfoUpgrade ceph-radosgwUpgrade ceph-resource-agentsUpgrade libradosstriper1Upgrade ceph-osdUpgrade rbd-nbdUpgrade librbd1Upgrade python-ceph-compatUpgrade ceph-commonUpgrade rbd-fuse-debuginfoUpgrade libcephfs-develUpgrade python-radosUpgrade ceph-testUpgrade rbd-mirrorUpgrade ceph-mon-debuginfoUpgrade rbd-mirror-debuginfoUpgrade cephUpgrade librbd-develUpgrade ceph-fuseUpgrade ceph-mds-debuginfoUpgrade librados-devel-debuginfoUpgrade libcephfs1-debuginfoUpgrade ceph-test-debuginfoUpgrade librbd1-debuginfoUpgrade rbd-fuseUpgrade python-cephfsUpgrade libradosstriper-develUpgrade rbd-nbd-debuginfoUpgrade python-rbdUpgrade librgw2-debuginfoUpgrade ceph-monUpgrade python-cephfs-debuginfoUpgrade ceph-mdsUpgrade librgw-develUpgrade librgw2Upgrade ceph-base-debuginfoUpgrade libradosstriper1-debuginfoUpgrade python-rbd-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade libcephfs1Upgrade ceph-baseUpgrade ceph-fuse-debuginfoUpgrade librados-devel | Apr 5, 2017 | Dec 15, 2016 |
| Ubuntu | — | Upgrade ceph-commonUpgrade ceph | Oct 11, 2017 | Dec 15, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub