CVE-2018-16846

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2019-04/msg00100.html · Mailing List
• access.redhat.com/errata/RHSA-2019:2538 · Third Party Advisory
• access.redhat.com/errata/RHSA-2019:2541 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• ceph.com/releases/13-2-4-mimic-released · Vendor Advisory
• lists.debian.org/debian-lts-announce/2019/03/msg00002.html · Mailing List
• lists.debian.org/debian-lts-announce/2021/08/msg00013.html · Mailing List
• usn.ubuntu.com/4035-1 · Third Party Advisory

ceph のその他の脆弱性

• CVE-2024-47866高 7.5Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument `x-amz-copy-sourc…
• CVE-2022-3650高 7.8A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a cr…
• CVE-2020-27839中 5.4A flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user authentication is stored by the frontend application in the brows…
• CVE-2021-3531中 5.3A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a GET Request for a swift URL that ends with tw…
• CVE-2021-3524中 6.5A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21. The vulnerability is related to the i…