The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Grafana is an open-source platform for monitoring and observability.
Using public dashboards users can query multiple distinct data sources using mixed queries. However such query has a possibility of crashing a Grafana instance.
The only feature that uses mixed queries at the moment is public dashboards, but it's also possible to cause this by calling the query API directly.
This might enable malicious users to crash Grafana instances through that endpoint.
Users may upgrade to version 9.4.12 and 9.5.3 to receive a fix.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade librados-develUpgrade librgw2Upgrade libcephsqlite-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade libcephfs2-debuginfoUpgrade python3-rbdUpgrade libcephfs-develUpgrade python3-radosUpgrade libcephfs2Upgrade librgw2-debuginfoUpgrade cephadmUpgrade ceph-commonUpgrade python3-ceph-argparseUpgrade ceph-fuse-debuginfoUpgrade python3-ceph-commonUpgrade librgw-develUpgrade librados-devel-debuginfoUpgrade ceph-immutable-object-cacheUpgrade rbd-fuse-debuginfoUpgrade rbd-nbdUpgrade python3-cephfsUpgrade ceph-fuseUpgrade libradosstriper1-debuginfoUpgrade librbd-develUpgrade python3-rados-debuginfoUpgrade ceph-debuginfoUpgrade ceph-mgr-debuginfoUpgrade python3-rgw-debuginfoUpgrade python3-rbd-debuginfoUpgrade ceph-resource-agentsUpgrade libradospp-develUpgrade ceph-osd-debuginfoUpgrade python3-cephfs-debuginfoUpgrade ceph-mibUpgrade rbd-nbd-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade ceph-selinuxUpgrade ceph-base-debuginfoUpgrade ceph-test-debuginfoUpgrade ceph-mon-debuginfoUpgrade cephfs-topUpgrade rbd-mirror-debuginfoUpgrade cephadm-ansibleUpgrade ceph-radosgw-debuginfoUpgrade python3-rgwUpgrade libradosstriper1Upgrade ceph-mds-debuginfoUpgrade ceph-exporter-debuginfoUpgrade ceph-common-debuginfoUpgrade ceph-debugsourceUpgrade ceph-base | Dec 13, 2023 | Jun 6, 2023 |
| Freebsd | — | Upgrade grafanaUpgrade grafana9 | Jun 8, 2023 | Jun 7, 2023 |
| Redhat_linux | — | Upgrade ceph-base-debuginfoUpgrade cephadm-ansibleUpgrade ceph-exporter-debuginfoUpgrade ceph-test-debuginfoUpgrade librados-develUpgrade rbd-fuse-debuginfoUpgrade python3-cephfsUpgrade rbd-nbd-debuginfoUpgrade ceph-debugsourceUpgrade python3-rgwUpgrade ceph-mon-debuginfoUpgrade python3-radosUpgrade libcephfs2-debuginfoUpgrade librgw2Upgrade ceph-radosgw-debuginfoUpgrade python3-cephfs-debuginfoUpgrade ceph-mgr-debuginfoUpgrade rbd-mirror-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade python3-ceph-argparseUpgrade libcephfs2Upgrade librgw-develUpgrade python3-ceph-commonUpgrade ceph-immutable-object-cacheUpgrade python3-rgw-debuginfoUpgrade ceph-debuginfoUpgrade python3-rbdUpgrade python3-rados-debuginfoUpgrade ceph-commonUpgrade python3-rbd-debuginfoUpgrade cephadmUpgrade libradosstriper1Upgrade librbd-develUpgrade ceph-fuseUpgrade libradosstriper1-debuginfoUpgrade ceph-mibUpgrade ceph-mds-debuginfoUpgrade rbd-nbdUpgrade cephfs-mirror-debuginfoUpgrade ceph-common-debuginfoUpgrade ceph-fuse-debuginfoNo solution existsUpgrade ceph-resource-agentsUpgrade libradospp-develUpgrade libcephfs-develUpgrade ceph-selinuxUpgrade librados-devel-debuginfoUpgrade librgw2-debuginfoUpgrade ceph-osd-debuginfoUpgrade ceph-baseUpgrade cephfs-topUpgrade libcephsqlite-debuginfo | Dec 13, 2023 | Jun 6, 2023 |
| Suse | — | Upgrade grafana | Jul 21, 2023 | Jun 6, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub