libcephfs-proxy2-debuginfo vulnerabilities (Red Hat)
23 vulnerabilities.
-
libcephfs-proxy2-debuginfoRed Hat Ceph RGW SigV4 handler accepts unsigned x-amz-* headers on presigned requests, allowing privilege escalation 8.1 High -
libcephfs-proxy2-debuginfoRed Hat Ceph Monitor subscription handler improperly authorizes config-key store reads, exposing cluster secrets to read-only users 9.1 Critical -
libcephfs-proxy2-debuginfoRed Hat Ceph: CephX AES Authentication error 8.8 High -
libcephfs-proxy2-debuginfoRed Hat Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery 8.9 High -
libcephfs-proxy2-debuginfoRed Hat RGW DoS attack with empty HTTP header in S3 object copy 7.5 High -
libcephfs-proxy2-debuginfoRed Hat Unbounded allocation when parsing GNU sparse map in archive/tar 4.3 Medium -
libcephfs-proxy2-debuginfoRed Hat CephFS Permission Escalation Vulnerability in Ceph Fuse mounted FS 6.5 Medium -
libcephfs-proxy2-debuginfoRed Hat jwt-go allows excessive memory allocation during header parsing 7.5 High -
libcephfs-proxy2-debuginfoRed Hat Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript 5.4 Medium -
libcephfs-proxy2-debuginfoRed Hat Ceph is vulnerable to authentication bypass through RadosGW 8.1 High -
libcephfs-proxy2-debuginfoRed Hat pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation... 7.1 High -
libcephfs-proxy2-debuginfoRed Hat WebOb's location header normalization during redirect leads to open redirect 6.1 Medium -
libcephfs-proxy2-debuginfoRed Hat In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer... 9.8 Critical -
libcephfs-proxy2-debuginfoRed Hat IBM Storage Ceph denial of service 2.6 Low -
libcephfs-proxy2-debuginfoRed Hat Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
libcephfs-proxy2-debuginfoRed Hat Werkzeug vulnerable to high resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning 8.0 High -
libcephfs-proxy2-debuginfoRed Hat containerd OCI image importer memory exhaustion 6.2 Medium -
libcephfs-proxy2-debuginfoRed Hat Werkzeug may allow high resource usage when parsing multipart form data with many fields 7.5 High -
libcephfs-proxy2-debuginfoRed Hat Wrkzeug's incorrect parsing of nameless cookies leads to __Host- cookies bypass 2.6 Low -
libcephfs-proxy2-debuginfoRed Hat Removal of TrustCor root certificate 6.8 Medium -
libcephfs-proxy2-debuginfoRed Hat Mistune vulnerable to catastrophic backtracking 7.5 High -
libcephfs-proxy2-debuginfoRed Hat TaffyDB can allow access to any data items in the DB 7.5 High -
libcephfs-proxy2-debuginfoRed Hat ceph - security update 7.5 High