exploitDog

ALT-PU-2017-2790

Низкий

ALT-PU-2017-2790: package ceph update to version 12.2.2-alt1.S1

Источник

errata.altlinux.org

Дата публикации

11.12.2017

Дата обновления

11.12.2017

Устраненные уязвимости

1

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades ceph to version 12.2.2-alt1.S1.

Устраненные уязвимости1

Ссылки1

ALT-PU-2017-2790 https://errata.altlinux.org/ALT-PU-2017-2790

Связанные уязвимости

CVE-2017-16818

CVSS3: 6.5

ubuntu

почти 9 лет назад

RADOS Gateway in Ceph 12.1.0 through 12.2.1 allows remote authenticated users to cause a denial of service (assertion failure and application exit) by leveraging "full" (not necessarily admin) privileges to post an invalid profile to the admin API, related to rgw/rgw_iam_policy.cc, rgw/rgw_basic_types.h, and rgw/rgw_iam_types.h.

CVE-2017-16818

CVSS3: 5.3

redhat

около 9 лет назад

RADOS Gateway in Ceph 12.1.0 through 12.2.1 allows remote authenticated users to cause a denial of service (assertion failure and application exit) by leveraging "full" (not necessarily admin) privileges to post an invalid profile to the admin API, related to rgw/rgw_iam_policy.cc, rgw/rgw_basic_types.h, and rgw/rgw_iam_types.h.

CVE-2017-16818

CVSS3: 6.5

nvd

почти 9 лет назад

RADOS Gateway in Ceph 12.1.0 through 12.2.1 allows remote authenticated users to cause a denial of service (assertion failure and application exit) by leveraging "full" (not necessarily admin) privileges to post an invalid profile to the admin API, related to rgw/rgw_iam_policy.cc, rgw/rgw_basic_types.h, and rgw/rgw_iam_types.h.

CVE-2017-16818

CVSS3: 6.5

debian

почти 9 лет назад

RADOS Gateway in Ceph 12.1.0 through 12.2.1 allows remote authenticate ...

GHSA-8cwf-cg6r-crcf

CVSS3: 6.5

github

больше 4 лет назад

RADOS Gateway in Ceph 12.1.0 through 12.2.1 allows remote authenticated users to cause a denial of service (assertion failure and application exit) by leveraging "full" (not necessarily admin) privileges to post an invalid profile to the admin API, related to rgw/rgw_iam_policy.cc, rgw/rgw_basic_types.h, and rgw/rgw_iam_types.h.