ceph vulnerabilities (Mageia)
29 vulnerabilities.
-
cephMageia Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a single JSON string/number exceeding the configured size limit (multi-language) 8.2 High -
cephMageia Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route 8.7 High -
cephMageia Apache Thrift: C++ THttpTransport grows its line buffer without bound 9.2 Critical -
cephMageia Apache Thrift: Perl `FramedTransport` reads and TLS socket writes re-slice the remaining buffer on every call (quadratic) 8.2 High -
cephMageia Apache Thrift: javame `TJsonProtocol`/`TJSONProtocol` has no string size bound 8.2 High -
cephMageia Apache Thrift: rb `TJsonProtocol`/`TJSONProtocol` has no string size bound 8.2 High -
cephMageia Apache Thrift: C++ `TEvhttpServer` leaks its `RequestContext` when the processor throws before calling back 6.3 Medium -
cephMageia Apache Thrift: An exception escaping a libevent callback stops the D library's non-blocking server, allowing an unauthenticated remote attacker to deny service 8.2 High -
cephMageia Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec 8.7 High -
cephMageia Apache Thrift, Apache Thrift: The C++ and D clients fall back to the certificate Common Name when subjectAltName entries are present but do not match 6.9 Medium -
cephMageia Apache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic) 8.2 High -
cephMageia Apache Thrift: nodejs web server: no `error` listener on an upgraded WebSocket connection 8.7 High -
cephMageia Apache Thrift: Java TSaslNonblockingServer pre-auth unbounded SASL frame allocation 8.7 High -
cephMageia Apache Thrift: Node.js `TJSONProtocol` uses a peer-declared container size as an unbounded loop bound 8.2 High -
cephMageia Ceph RGW SigV4 handler accepts unsigned x-amz-* headers on presigned requests, allowing privilege escalation 8.1 High -
cephMageia Ceph Monitor subscription handler improperly authorizes config-key store reads, exposing cluster secrets to read-only users 9.1 Critical -
cephMageia Ceph: CephX AES Authentication error 8.8 High -
cephMageia Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery 8.9 High -
cephMageia RGW DoS attack with empty HTTP header in S3 object copy 7.5 High -
cephMageia CephFS Permission Escalation Vulnerability in Ceph Fuse mounted FS 6.5 Medium -
cephMageia Ceph is vulnerable to authentication bypass through RadosGW 8.1 High -
cephMageia A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to... 7.8 High -
cephMageia A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner... 9.1 Critical -
cephMageia A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the... 6.5 Medium -
cephMageia A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14... 6.5 Medium -
cephMageia An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles... 7.2 High -
cephMageia A flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user authentication is... 5.4 Medium -
cephMageia A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in... 4.4 Medium -
cephMageia ceph - security update 7.5 High