CVE-2021-3531

概要

参考情報

• openwall.com/lists/oss-security/2021/05/14/5 · Mailing List
• openwall.com/lists/oss-security/2021/05/17/7 · Mailing List
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• lists.debian.org/debian-lts-announce/2023/10/msg00034.html
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FX5ZHI5L7FOHXOSEV3TYBAL66DMLJ7V5
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LPCJN2YDZCBMF4FOJXSTAADKFGEQEO7O
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZRUNDH2TJRZRWL3DCH2PQ6KROWTPQ7AJ

ceph のその他の脆弱性

• CVE-2024-47866高 7.5Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument `x-amz-copy-sourc…
• CVE-2022-3650高 7.8A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a cr…
• CVE-2020-27839中 5.4A flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user authentication is stored by the frontend application in the brows…
• CVE-2021-3524中 6.5A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21. The vulnerability is related to the i…
• CVE-2020-25678中 4.4A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text. This can be found by searching th…