Поиск уязвимостей
Количество 31
Количество 31
CVE-2021-3524
A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21. The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. In addition, the prior bug fix for CVE-2020-10753 did not account for the use of \r as a header separator, thus a new flaw has been created.
CVE-2021-3524
A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21. The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. In addition, the prior bug fix for CVE-2020-10753 did not account for the use of \r as a header separator, thus a new flaw has been created.
CVE-2021-3524
A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gate ...
SUSE-SU-2021:1473-1
Security update for ceph
GHSA-wc6g-g56r-jp2f
A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a GET Request for a swift URL that ends with two slashes it can cause the rgw to crash, resulting in a denial of service. The greatest threat to the system is of availability.
GHSA-3rmw-wm6w-rmcr
A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21. The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. In addition, the prior bug fix for CVE-2020-10753 did not account for the use of \r as a header separator, thus a new flaw has been created.
BDU:2021-06309
Уязвимость компонента RGW системы хранения данных Ceph, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-03709
Уязвимость системы хранения данных Ceph, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю оказать воздействие на целостность данных
ALT-PU-2022-7775
ALT-PU-2022-7775: package `kernel-image-std-debug` update to version 5.15.72-alt1
ALT-PU-2022-1240
ALT-PU-2022-1240: package `kernel-image-std-def` update to version 5.15.22-alt1
ALT-PU-2021-1990
ALT-PU-2021-1990: package `kernel-image-un-def` update to version 5.12.10-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-3524 A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21. The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. In addition, the prior bug fix for CVE-2020-10753 did not account for the use of \r as a header separator, thus a new flaw has been created. | CVSS3: 6.5 | 2% Низкий | больше 5 лет назад |
 | CVE-2021-3524 A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21. The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. In addition, the prior bug fix for CVE-2020-10753 did not account for the use of \r as a header separator, thus a new flaw has been created. | CVSS3: 6.5 | 2% Низкий | больше 5 лет назад |
| CVE-2021-3524 A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gate ... | CVSS3: 6.5 | 2% Низкий | больше 5 лет назад |
 | SUSE-SU-2021:1473-1 Security update for ceph | больше 5 лет назад | ||
| GHSA-wc6g-g56r-jp2f A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a GET Request for a swift URL that ends with two slashes it can cause the rgw to crash, resulting in a denial of service. The greatest threat to the system is of availability. | CVSS3: 5.3 | 2% Низкий | больше 4 лет назад |
| GHSA-3rmw-wm6w-rmcr A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21. The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. In addition, the prior bug fix for CVE-2020-10753 did not account for the use of \r as a header separator, thus a new flaw has been created. | CVSS3: 6.5 | 2% Низкий | больше 4 лет назад |
 | BDU:2021-06309 Уязвимость компонента RGW системы хранения данных Ceph, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.3 | 2% Низкий | больше 5 лет назад |
| BDU:2021-03709 Уязвимость системы хранения данных Ceph, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю оказать воздействие на целостность данных | CVSS3: 6.5 | 2% Низкий | больше 5 лет назад |
| ALT-PU-2022-7775 ALT-PU-2022-7775: package `kernel-image-std-debug` update to version 5.15.72-alt1 | CVSS3: 8.8 | около 4 лет назад | |
| ALT-PU-2022-1240 ALT-PU-2022-1240: package `kernel-image-std-def` update to version 5.15.22-alt1 | CVSS3: 9.8 | почти 5 лет назад | |
| ALT-PU-2021-1990 ALT-PU-2021-1990: package `kernel-image-un-def` update to version 5.12.10-alt1 | CVSS3: 9.8 | больше 5 лет назад |
Уязвимостей на страницу