{"id":"CVE-2015-5245","aliases":["DEBIAN-CVE-2015-5245","EUVD-2015-5237","GHSA-782g-wgjp-wr8j","RHSA-2015:2066","SUSE-SU-2016:0806-1","UBUNTU-CVE-2015-5245"],"status":"published","title":"CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94...","description":"CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted bucket name.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01907,"percentile":0.79893,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2015-12-03T20:00:00Z","modified":"2026-09-09T06:47:20Z","fixes":[{"ecosystem":"Debian:12","package":"ceph","fixed_in":["0.80.10-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ceph","fixed_in":["0.80.10-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ceph","fixed_in":["0.80.10-1"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"babeltrace","fixed_in":["0:1.2.4-3.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"babeltrace-debuginfo","fixed_in":["0:1.2.4-3.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ceph","fixed_in":["1:0.94.3-3.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ceph-common","fixed_in":["1:0.94.3-3.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ceph-debuginfo","fixed_in":["1:0.94.3-3.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ceph-radosgw","fixed_in":["1:0.94.3-3.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"libbabeltrace","fixed_in":["0:1.2.4-3.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"librados2","fixed_in":["1:0.94.3-3.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"librados2-devel","fixed_in":["1:0.94.3-3.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"librbd1","fixed_in":["1:0.94.3-3.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"librbd1-devel","fixed_in":["1:0.94.3-3.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"lttng-tools","fixed_in":["0:2.4.1-1.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"lttng-tools-debuginfo","fixed_in":["0:2.4.1-1.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"lttng-ust","fixed_in":["0:2.4.1-1.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"lttng-ust-debuginfo","fixed_in":["0:2.4.1-1.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"python-rados","fixed_in":["1:0.94.3-3.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"python-rbd","fixed_in":["1:0.94.3-3.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"radosgw-agent","fixed_in":["0:1.2.3-1.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"userspace-rcu","fixed_in":["0:0.7.9-2.el7rhgs"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"userspace-rcu-debuginfo","fixed_in":["0:0.7.9-2.el7rhgs"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"calamari-server","fixed_in":["0:1.3-11.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ceph-deploy","fixed_in":["0:1.5.27.3-1.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ceph-puppet-modules","fixed_in":["0:0.1.1-1.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"facter","fixed_in":["1:1.7.6-2.1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"facter-debuginfo","fixed_in":["1:1.7.6-2.1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"foreman","fixed_in":["0:1.7.2.33-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"foreman-debug","fixed_in":["0:1.7.2.33-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"foreman-installer","fixed_in":["1:1.7.5-2.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"foreman-postgresql","fixed_in":["0:1.7.2.33-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"foreman-proxy","fixed_in":["0:1.7.2.5-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"foreman-release","fixed_in":["0:1.7.2.33-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"foreman-selinux","fixed_in":["0:1.7.2.13-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"foreman-sqlite","fixed_in":["0:1.7.2.33-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"hiera","fixed_in":["0:1.3.1-2.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ipxe","fixed_in":["0:20130517-7.1fm.gitc4bce43.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ipxe-bootimgs","fixed_in":["0:20130517-7.1fm.gitc4bce43.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ipxe-roms","fixed_in":["0:20130517-7.1fm.gitc4bce43.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ipxe-roms-qemu","fixed_in":["0:20130517-7.1fm.gitc4bce43.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"mod_passenger","fixed_in":["0:4.0.18-19.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"puppet","fixed_in":["0:3.6.2-4.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"puppet-server","fixed_in":["0:3.6.2-4.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rhcs-installer","fixed_in":["0:0.1.0-1.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby-augeas","fixed_in":["0:0.5.0-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby-augeas-debuginfo","fixed_in":["0:0.5.0-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby-rgen","fixed_in":["0:0.6.5-2.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby-shadow","fixed_in":["0:1.4.1-21.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby-shadow-debuginfo","fixed_in":["0:1.4.1-21.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-facter","fixed_in":["0:1.6.18-5.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-ruby-wrapper","fixed_in":["0:0.0.2-6.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-ancestry","fixed_in":["0:2.0.0-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-apipie-rails","fixed_in":["0:0.2.5-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-audited","fixed_in":["0:3.0.0-5.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-audited-activerecord","fixed_in":["0:3.0.0-8.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-bundler_ext","fixed_in":["0:0.3.0-6.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-deep_cloneable","fixed_in":["0:2.0.0-4.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-fast_gettext","fixed_in":["0:0.8.0-13.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-foreigner","fixed_in":["0:1.4.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-foreman_bootdisk","fixed_in":["0:4.0.2.13-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-friendly_id","fixed_in":["0:4.0.10.1-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-gettext_i18n_rails","fixed_in":["0:0.10.0-3.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-gettext_i18n_rails_js","fixed_in":["0:0.0.8-3.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-i18n_data","fixed_in":["0:0.2.7-5.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-ldap_fluff","fixed_in":["0:0.3.2-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-multi_json","fixed_in":["0:1.8.2-4.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-net-ldap","fixed_in":["0:0.3.1-3.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-oauth","fixed_in":["0:0.4.7-8.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-passenger","fixed_in":["0:4.0.18-19.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-passenger-debuginfo","fixed_in":["0:4.0.18-19.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-passenger-native","fixed_in":["0:4.0.18-19.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-passenger-native-libs","fixed_in":["0:4.0.18-19.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-pg","fixed_in":["0:0.12.2-10.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-pg-debuginfo","fixed_in":["0:0.12.2-10.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-po_to_json","fixed_in":["0:0.0.7-3.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-rabl","fixed_in":["0:0.9.0-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-rest-client","fixed_in":["0:1.6.7-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-ruby2ruby","fixed_in":["0:2.0.1-9.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-ruby_parser","fixed_in":["0:3.1.1-15.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-safemode","fixed_in":["0:1.2.1-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-scoped_search","fixed_in":["0:2.7.1-2.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-secure_headers","fixed_in":["0:1.3.3-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-sexp_processor","fixed_in":["0:4.1.3-7.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-sprockets","fixed_in":["0:2.10.1-3.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-uuidtools","fixed_in":["0:2.1.3-6.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-validates_lengths_from_database","fixed_in":["0:0.2.0-1.3.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-will_paginate","fixed_in":["0:3.0.2-10.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-ansi","fixed_in":["0:1.4.3-3.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-apipie-bindings","fixed_in":["0:0.0.11-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-awesome_print","fixed_in":["0:1.0.2-12.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-bundler_ext","fixed_in":["0:0.3.0-7.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-clamp","fixed_in":["0:0.6.2-2.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-ffi","fixed_in":["0:1.4.0-3.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-ffi-debuginfo","fixed_in":["0:1.4.0-3.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-gssapi","fixed_in":["0:1.1.2-4.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-hashie","fixed_in":["0:2.0.5-2.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-highline","fixed_in":["0:1.6.21-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-kafo","fixed_in":["0:0.6.5.9-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-kafo_parsers","fixed_in":["0:0.0.4.4-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-little-plugger","fixed_in":["0:1.1.3-17.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-logging","fixed_in":["0:1.8.1-26.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-mime-types","fixed_in":["0:1.19-7.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-multi_json","fixed_in":["0:1.8.2-4.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-oauth","fixed_in":["0:0.4.7-8.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-passenger","fixed_in":["0:4.0.18-19.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-passenger-debuginfo","fixed_in":["0:4.0.18-19.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-passenger-native","fixed_in":["0:4.0.18-19.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-passenger-native-libs","fixed_in":["0:4.0.18-19.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-powerbar","fixed_in":["0:1.0.11-8.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-rack","fixed_in":["1:1.4.1-13.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-rack-protection","fixed_in":["0:1.5.0-7.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-rake","fixed_in":["0:0.9.2.2-41.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-rest-client","fixed_in":["0:1.6.7-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-rkerberos","fixed_in":["0:0.1.2-3.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-rkerberos-debuginfo","fixed_in":["0:0.1.2-3.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-rubyipmi","fixed_in":["0:0.10.0-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-sinatra","fixed_in":["1:1.3.6-27.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-smart_proxy_discovery","fixed_in":["0:1.0.2.1-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-tilt","fixed_in":["0:1.3.3-18.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ceph-mon","fixed_in":["1:0.94.3-3.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ceph-test","fixed_in":["1:0.94.3-3.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ceph-osd","fixed_in":["1:0.94.3-3.el7cp"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 1.0","package":"ceph","fixed_in":["0.80.11-8.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.80.10-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.80.10-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.80.10-1"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"babeltrace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-3.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"babeltrace-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-3.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.94.3-3.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.94.3-3.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ceph-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.94.3-3.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ceph-radosgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.94.3-3.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"libbabeltrace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.4-3.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.94.3-3.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"librados2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.94.3-3.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.94.3-3.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"librbd1-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.94.3-3.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"lttng-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-1.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"lttng-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-1.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"lttng-ust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-1.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"lttng-ust-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.1-1.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"python-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.94.3-3.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"python-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.94.3-3.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"radosgw-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.3-1.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"userspace-rcu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.9-2.el7rhgs"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"userspace-rcu-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.9-2.el7rhgs"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"calamari-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3-11.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ceph-deploy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.27.3-1.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ceph-puppet-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.1-1.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"facter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.6-2.1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"facter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.6-2.1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2.33-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2.33-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"foreman-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.5-2.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2.33-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"foreman-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2.5-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"foreman-release","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2.33-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"foreman-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2.13-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"foreman-sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2.33-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"hiera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-2.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ipxe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20130517-7.1fm.gitc4bce43.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ipxe-bootimgs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20130517-7.1fm.gitc4bce43.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ipxe-roms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20130517-7.1fm.gitc4bce43.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ipxe-roms-qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20130517-7.1fm.gitc4bce43.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"mod_passenger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-19.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.2-4.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"puppet-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.6.2-4.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rhcs-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.0-1.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby-augeas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby-augeas-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby-rgen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.5-2.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby-shadow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-21.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby-shadow-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-21.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-facter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.18-5.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-ruby-wrapper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.2-6.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-ancestry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-apipie-rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.5-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-audited","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-5.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-audited-activerecord","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-8.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-bundler_ext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-6.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-deep_cloneable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-4.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-fast_gettext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8.0-13.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-foreigner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-foreman_bootdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2.13-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-friendly_id","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.10.1-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-gettext_i18n_rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-3.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-gettext_i18n_rails_js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.8-3.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-i18n_data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.7-5.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-ldap_fluff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.2-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-multi_json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-4.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-net-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.1-3.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-oauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.7-8.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-passenger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-19.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-passenger-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-19.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-passenger-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-19.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-passenger-native-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-19.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-pg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.2-10.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-pg-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.2-10.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-po_to_json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.7-3.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-rabl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-rest-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.7-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-ruby2ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-9.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-ruby_parser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-15.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-safemode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-scoped_search","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-2.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-secure_headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-sexp_processor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.3-7.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-sprockets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.10.1-3.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-uuidtools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-6.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-validates_lengths_from_database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-1.3.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ruby193-rubygem-will_paginate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.2-10.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-ansi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.3-3.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-apipie-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.11-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-awesome_print","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-12.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-bundler_ext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-7.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-clamp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.2-2.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-ffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-3.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-ffi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-3.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-gssapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-4.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-hashie","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.5-2.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-highline","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.21-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-kafo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.5.9-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-kafo_parsers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.4.4-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-little-plugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.3-17.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-26.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-mime-types","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19-7.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-multi_json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.2-4.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-oauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.7-8.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-passenger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-19.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-passenger-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-19.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-passenger-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-19.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-passenger-native-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.18-19.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-powerbar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.11-8.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.4.1-13.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-rack-protection","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-7.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-rake","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.2.2-41.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-rest-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.7-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-rkerberos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.2-3.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-rkerberos-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.2-3.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-rubyipmi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.0-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-sinatra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.3.6-27.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-smart_proxy_discovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2.1-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"rubygem-tilt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.3-18.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ceph-mon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.94.3-3.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ceph-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.94.3-3.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:1.3::el7","package":"ceph-osd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.94.3-3.el7cp"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 1.0","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.80.11-8.1"}]}]}],"products":[{"vendor":"redhat","product":"ceph"}],"references":[{"url":"http://tracker.ceph.com/issues/12537","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2512","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://lists.ceph.com/pipermail/ceph-announce-ceph.com/2015-October/000034.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5245","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2066","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5245","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1261606","tags":["report"]},{"url":"https://github.com/advisories/GHSA-782g-wgjp-wr8j"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-5245","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/support/offerings/techpreview/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1210825","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1219040","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1220961","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1223532","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1223941","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1224174","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1224877","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1228842","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1235845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1238415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1253766","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1254814","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1255830","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1258618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1258621","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1265973","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1277393","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2066.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5245","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160806-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/926756","tags":["report"]},{"url":"https://bugzilla.suse.com/931451","tags":["report"]},{"url":"https://bugzilla.suse.com/941628","tags":["report"]},{"url":"https://bugzilla.suse.com/945206","tags":["report"]},{"url":"https://bugzilla.suse.com/964907","tags":["report"]},{"url":"https://bugzilla.suse.com/965619","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5245","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-5245","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-5245","description":"CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted bucket name.","status":"published","published":"2015-12-03T20:00:00Z","modified":"2024-08-06T06:41:09.165Z","updated_at":"2026-11-02T14:35:39.846011Z"}],"euvd":[{"id":"EUVD-2015-5237","description":"CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted bucket name.","status":"published","published":"2015-12-03T20:00:00Z","modified":"2024-08-06T06:41:09Z","updated_at":"2026-11-03T02:22:00.863884Z"}],"ghsa":[{"id":"GHSA-782g-wgjp-wr8j","title":"CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94...","description":"CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted bucket name.","status":"published","published":"2022-05-17T04:01:16Z","modified":"2023-02-10T05:06:21Z","updated_at":"2026-11-02T14:54:01.789224Z"}],"nvd":[{"id":"CVE-2015-5245","description":"CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted bucket name.","status":"published","published":"2015-12-03T20:59:05.223Z","modified":"2026-06-17T00:28:44.87Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:14.501367Z"}],"osv":[{"id":"CVE-2015-5245","description":"CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted bucket name.","status":"published","published":"2015-12-03T20:59:05Z","modified":"2026-04-10T03:45:20.519731Z","updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DEBIAN-CVE-2015-5245","description":"CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted bucket name.","status":"published","published":"2015-12-03T20:59:05.223Z","modified":"2026-09-09T06:47:20.430951227Z","updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"RHSA-2015:2066","title":"Red Hat Security Advisory: Red Hat Ceph Storage 1.3.1 security, bug fix, and enhancement update","status":"published","published":"2024-09-13T10:38:56Z","modified":"2026-06-29T10:10:29Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2016:0806-1","title":"Security update for ceph","description":"\nThis update provides Ceph 0.8.11, which fixes the following security issue:\n\n- CVE-2015-5245: A CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw\n  or RGW) could allow remote attackers to inject arbitrary HTTP headers and conduct\n  HTTP response splitting attacks via a crafted bucket name. (bsc#945206)\n\nThe following non-security issues have been fixed:\n\n- Move ceph-rbdnamer binary from package 'ceph' to 'ceph-common'. (bsc#965619)\n- Install /usr/bin/radosgw with mode 0750 and owner root:www. (bsc#964907)\n- Loop over all ceph-related systemd units on rpm removal. (bsc#941628)\n- Perform ceph-disk activate in separate systemd services, rather than in udev directly.\n  (bsc#926756)\n- Add hyphen to systemctl reload in logrotate.conf to avoid matching ceph.target.\n  (bsc#931451)\n\nCeph 0.8.11 also brings a significant number of bug fixes and enhancements. For a\ncomprehensive list please refer to the package's change log.\n","status":"published","published":"2016-03-17T14:39:05Z","modified":"2026-02-04T02:37:09.422329Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2015-5245","description":"CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted bucket name.","status":"withdrawn","published":"2015-12-03T20:59:00Z","modified":"2025-07-16T08:11:36.060116Z","updated_at":"2026-11-02T15:54:10.385269Z"}]}}