ceph vulnerabilities (Azure Linux)
55 vulnerabilities.
-
cephAzure Linux Apache Arrow C++, PyArrow: Parquet file-controlled KMS URL is forwarded to pluggable KmsClient that skips host validation 8.1 High -
cephAzure Linux Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup 6.5 Medium -
cephAzure Linux DaveGamble cJSON cJSON_Utils.c cJSONUtils_MergePatch use after free 6.9 Medium -
cephAzure Linux Ceph RGW SigV4 handler accepts unsigned x-amz-* headers on presigned requests, allowing privilege escalation 8.1 High -
cephAzure Linux Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery 8.9 High -
cephAzure Linux Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib 9.8 Critical -
cephAzure Linux RGW DoS attack with empty HTTP header in S3 object copy 7.5 High -
cephAzure Linux Denial of Service in CivetWeb 8.7 High -
cephAzure Linux CephFS Permission Escalation Vulnerability in Ceph Fuse mounted FS 6.5 Medium -
cephAzure Linux Potential heap-buffer overflow vulnerability in NotepadNext 9.4 Critical -
cephAzure Linux cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b":... 2.9 Low -
cephAzure Linux Out-of-bounds Write in radare2 10.0 Critical -
cephAzure Linux Ceph is vulnerable to authentication bypass through RadosGW 8.1 High -
cephAzure Linux Apache Arrow R package: Arbitrary code execution when loading a malicious data file 9.8 Critical -
cephAzure Linux XSS in Bootstrap button component 6.4 Medium -
cephAzure Linux Tencent RapidJSON include/rapidjson/reader.h GenericReader::ParseNumber() Function Template Exponent Parsing Integer Overflow 6.8 Medium -
cephAzure Linux Tencent RapidJSON include/rapidjson/reader.h GenericReader::ParseNumber() Function Template Exponent Parsing Integer Underflow 6.8 Medium -
cephAzure Linux c-ares out of bounds read in ares__read_line() 4.4 Medium -
cephAzure Linux IBM Spectrum Fusion HCI improper access control 6.5 Medium -
cephAzure Linux A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit... 6.5 Medium -
cephAzure Linux A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to... 7.8 High -
cephAzure Linux A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner... 9.1 Critical -
cephAzure Linux Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform... 5.5 Medium -
cephAzure Linux The CivetWeb web library does not validate uploaded filepaths when running on an OS other than... 9.8 Critical -
cephAzure Linux A flaw was found in c-ares library, where a missing input validation check of host names returned... 5.6 Medium -
cephAzure Linux An issue was discovered in Storage Performance Development Kit (SPDK) before 20.01.01. If a PDU... 7.5 High -
cephAzure Linux Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the... 4.7 Medium -
cephAzure Linux An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc`... 3.3 Low -
cephAzure Linux lgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a... 5.3 Medium -
cephAzure Linux ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the... 7.0 High -
cephAzure Linux SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables... 5.5 Medium -
cephAzure Linux ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted... 5.5 Medium -
cephAzure Linux SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c. 5.5 Medium -
cephAzure Linux SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c. 5.5 Medium -
cephAzure Linux A vulnerability was found in DPDK versions 18.11 and above. The vhost-crypto library code is... 5.1 Medium -
cephAzure Linux A memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an... 5.1 Medium -
cephAzure Linux A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer... 5.1 Medium -
cephAzure Linux SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a... 7.5 High -
cephAzure Linux In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by... 9.8 Critical -
cephAzure Linux pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in... 9.8 Critical -
cephAzure Linux alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types... 5.5 Medium -
cephAzure Linux In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other... 6.5 Medium -
cephAzure Linux SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the... 9.8 Critical -
cephAzure Linux SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote... 7.5 High -
cephAzure Linux Bootstrap Vulnerable to Cross-Site Scripting 6.1 Medium -
cephAzure Linux bootstrap Cross-site Scripting vulnerability 6.1 Medium -
cephAzure Linux SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and... 8.1 High -
cephAzure Linux SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and... 8.1 High -
cephAzure Linux The Battle for Wesnoth Project version 1.7.0 through 1.14.3 contains a Code Injection... 8.8 High -
cephAzure Linux Bootstrap Cross-site Scripting vulnerability 6.1 Medium - Show olderLoading…