Описание
A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged information.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| ceph | fixed | 16.2.10+ds-4 | package | |
| ceph | not-affected | buster | package |
Примечания
https://www.openwall.com/lists/oss-security/2022/10/25/1
https://tracker.ceph.com/issues/57967
https://github.com/ceph/ceph/pull/48713
https://github.com/ceph/ceph/commit/45915540559126a652f8d9d105723584cfc63439 (main)
https://github.com/ceph/ceph/commit/130c9626598bc3a75942161e6cce7c664c447382 (main)
Backport to Pacific: https://github.com/ceph/ceph/pull/48804
Backport to Quincy: https://github.com/ceph/ceph/pull/48805
Связанные уязвимости
A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged information.
A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged information.
A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged information.
A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged information.