Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2019-2024 and is owned by Tenable, Inc. or an Affiliate thereof.OPENSUSE-2019-1284.NASL
HistoryApr 29, 2019 - 12:00 a.m.

openSUSE Security Update : ceph (openSUSE-2019-1284)

2019-04-2900:00:00
This script is Copyright (C) 2019-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
43

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.1%

JSON

This update for ceph version 13.2.4 fixes the following issues :

Security issues fixed :

  • CVE-2018-14662: Fixed an issue with LUKS ‘config-key’ safety (bsc#1111177)

  • CVE-2018-10861: Fixed an authorization bypass on OSD pool ops in ceph-mon (bsc#1099162)

  • CVE-2018-1128: Fixed signature check bypass in cephx (bsc#1096748)

  • CVE-2018-1129: Fixed replay attack in cephx protocol (bsc#1096748)

  • CVE-2018-16846: Enforced bounds on max-keys/max-uploads/max-parts in rgw (bsc#1114710)

Non-security issues fixed :

  • ceph-volume Python 3 fixes (bsc#1114567)

  • Fixed python3 module loading (bsc#1086613)

  • Fixed an issue where ceph build fails (bsc#1084645)

  • ceph’s SPDK builds with march=native (bsc#1101262)

This update was imported from the SUSE:SLE-15:Update update project.

#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from openSUSE Security Update openSUSE-2019-1284.
#
# The text description of this plugin is (C) SUSE LLC.
#

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(124358);
  script_version("1.5");
  script_set_attribute(attribute:"plugin_modification_date", value:"2024/05/30");

  script_cve_id(
    "CVE-2018-10861",
    "CVE-2018-1128",
    "CVE-2018-1129",
    "CVE-2018-14662",
    "CVE-2018-16846"
  );

  script_name(english:"openSUSE Security Update : ceph (openSUSE-2019-1284)");

  script_set_attribute(attribute:"synopsis", value:
"The remote openSUSE host is missing a security update.");
  script_set_attribute(attribute:"description", value:
"This update for ceph version 13.2.4 fixes the following issues :

Security issues fixed :

  - CVE-2018-14662: Fixed an issue with LUKS 'config-key'
    safety (bsc#1111177)

  - CVE-2018-10861: Fixed an authorization bypass on OSD
    pool ops in ceph-mon (bsc#1099162)

  - CVE-2018-1128: Fixed signature check bypass in cephx
    (bsc#1096748)

  - CVE-2018-1129: Fixed replay attack in cephx protocol
    (bsc#1096748)

  - CVE-2018-16846: Enforced bounds on
    max-keys/max-uploads/max-parts in rgw (bsc#1114710)

Non-security issues fixed :

  - ceph-volume Python 3 fixes (bsc#1114567)

  - Fixed python3 module loading (bsc#1086613)

  - Fixed an issue where ceph build fails (bsc#1084645)

  - ceph's SPDK builds with march=native (bsc#1101262)

This update was imported from the SUSE:SLE-15:Update update project.");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1084645");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1086613");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1096748");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1099162");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1101262");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1111177");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1114567");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1114710");
  script_set_attribute(attribute:"solution", value:
"Update the affected ceph packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:S/C:N/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2018-10861");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2018/07/10");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/04/27");
  script_set_attribute(attribute:"plugin_publication_date", value:"2019/04/29");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ceph");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ceph-base");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ceph-base-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ceph-common");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ceph-common-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ceph-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ceph-fuse");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ceph-fuse-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ceph-mds");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ceph-mds-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ceph-mgr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ceph-mgr-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ceph-mon");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ceph-mon-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ceph-osd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ceph-osd-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ceph-radosgw");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ceph-radosgw-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ceph-resource-agents");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ceph-test");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ceph-test-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:ceph-test-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libcephfs-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libcephfs2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libcephfs2-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:librados-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:librados-devel-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:librados2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:librados2-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libradosstriper-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libradosstriper1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libradosstriper1-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:librbd-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:librbd1");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:librbd1-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:librgw-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:librgw2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:librgw2-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:python3-cephfs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:python3-cephfs-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:python3-rados");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:python3-rados-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:python3-rbd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:python3-rbd-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:python3-rgw");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:python3-rgw-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:rados-objclass-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:rbd-fuse");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:rbd-fuse-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:rbd-mirror");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:rbd-mirror-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:rbd-nbd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:rbd-nbd-debuginfo");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:15.0");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"SuSE Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2019-2024 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/SuSE/release", "Host/SuSE/rpm-list", "Host/cpu");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release =~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "openSUSE");
if (release !~ "^(SUSE15\.0)$") audit(AUDIT_OS_RELEASE_NOT, "openSUSE", "15.0", release);
if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

ourarch = get_kb_item("Host/cpu");
if (!ourarch) audit(AUDIT_UNKNOWN_ARCH);
if (ourarch !~ "^(x86_64)$") audit(AUDIT_ARCH_NOT, "x86_64", ourarch);

flag = 0;

if ( rpm_check(release:"SUSE15.0", reference:"ceph-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ceph-base-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ceph-base-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ceph-common-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ceph-common-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ceph-debugsource-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ceph-fuse-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ceph-fuse-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ceph-mds-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ceph-mds-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ceph-mgr-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ceph-mgr-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ceph-mon-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ceph-mon-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ceph-osd-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ceph-osd-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ceph-radosgw-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ceph-radosgw-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ceph-resource-agents-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ceph-test-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ceph-test-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"ceph-test-debugsource-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"libcephfs-devel-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"libcephfs2-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"libcephfs2-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"librados-devel-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"librados-devel-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"librados2-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"librados2-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"libradosstriper-devel-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"libradosstriper1-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"libradosstriper1-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"librbd-devel-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"librbd1-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"librbd1-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"librgw-devel-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"librgw2-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"librgw2-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"python3-cephfs-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"python3-cephfs-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"python3-rados-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"python3-rados-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"python3-rbd-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"python3-rbd-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"python3-rgw-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"python3-rgw-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"rados-objclass-devel-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"rbd-fuse-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"rbd-fuse-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"rbd-mirror-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"rbd-mirror-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"rbd-nbd-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.0", reference:"rbd-nbd-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1") ) flag++;

if (flag)
{
  if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
  else security_warning(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "ceph-test / ceph-test-debuginfo / ceph-test-debugsource / ceph / etc");
}
VendorProductVersionCPE
novellopensuseceph-radosgw-debuginfop-cpe:/a:novell:opensuse:ceph-radosgw-debuginfo
novellopensuseceph-mds-debuginfop-cpe:/a:novell:opensuse:ceph-mds-debuginfo
novellopensuselibrgw2p-cpe:/a:novell:opensuse:librgw2
novellopensuse15.0cpe:/o:novell:opensuse:15.0
novellopensuseceph-osdp-cpe:/a:novell:opensuse:ceph-osd
novellopensuselibrbd1p-cpe:/a:novell:opensuse:librbd1
novellopensuselibrados-devel-debuginfop-cpe:/a:novell:opensuse:librados-devel-debuginfo
novellopensuseceph-resource-agentsp-cpe:/a:novell:opensuse:ceph-resource-agents
novellopensuselibradosstriper-develp-cpe:/a:novell:opensuse:libradosstriper-devel
novellopensusepython3-rgwp-cpe:/a:novell:opensuse:python3-rgw
Rows per page:
1-10 of 541

Related

nessus 35
openvas 32
suse 5
redhat 6
fedora 3
debian 4
osv 11
photon 5
ubuntu 2
debiancve 6
redhatcve 6
prion 6
ubuntucve 6
veracode 5
nvd 6
cve 6
cvelist 6
cbl_mariner 1
mageia 3
alpinelinux 1
archlinux 1
nessus
nessus
SUSE SLED15 / SLES15 Security Update : ceph (SUSE-SU-2019:0586-1)
2019-03-13 00:00:00
SUSE SLED12 / SLES12 Security Update : ceph (SUSE-SU-2018:2193-1)
2018-08-06 00:00:00
openSUSE Security Update : ceph (openSUSE-2018-854)
2018-08-10 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2019:0586-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for ceph (openSUSE-SU-2019:1284-1)
2019-04-28 00:00:00
Fedora Update for ceph FEDORA-2018-8738f5f4a7
2018-08-07 00:00:00
suse
suse
Security update for ceph (moderate)
2019-04-28 00:00:00
Security update for ceph (important)
2018-08-10 03:07:22
Security update for ceph (important)
2019-03-08 00:00:00
redhat
redhat
(RHSA-2018:2274) Moderate: Red Hat Ceph Storage 2.5 security, enhancement, and bug fix update
2018-07-26 15:34:33
(RHSA-2018:2177) Moderate: Red Hat Ceph Storage 3.0 security and bug fix update
2018-07-11 17:59:08
(RHSA-2018:2261) Moderate: Red Hat Ceph Storage 2.5 security, enhancement, and bug fix update
2018-07-25 16:00:56
fedora
fedora
[SECURITY] Fedora 27 Update: ceph-12.2.7-1.fc27
2018-08-07 00:12:20
[SECURITY] Fedora 28 Update: ceph-12.2.6-1.fc28
2018-07-18 18:32:39
[SECURITY] Fedora 29 Update: ceph-12.2.11-1.fc29
2019-02-20 03:07:29
debian
debian
[SECURITY] [DLA 1696-1] ceph security update
2019-03-01 17:52:22
[SECURITY] [DLA 2735-1] ceph security update
2021-08-10 22:05:10
[SECURITY] [DSA 4339-1] ceph security update
2018-11-13 21:48:36
osv
osv
ceph - security update
2019-02-28 00:00:00
ceph - security update
2018-11-13 00:00:00
ceph - security update
2021-08-09 00:00:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0237
2020-05-01 00:00:00
Moderate Photon OS Security Update - PHSA-2020-0237
2020-04-30 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-2.0-0104
2018-10-18 00:00:00
ubuntu
ubuntu
Ceph vulnerabilities
2019-06-25 00:00:00
Ceph vulnerabilities
2021-01-28 00:00:00
debiancve
debiancve
CVE-2018-10861
2018-07-10 14:29:00
CVE-2018-14662
2019-01-15 21:29:00
CVE-2018-16846
2019-01-15 18:29:00
redhatcve
redhatcve
CVE-2018-10861
2021-08-14 22:35:41
CVE-2018-14662
2019-01-14 15:52:15
CVE-2018-16846
2019-01-14 15:51:31
prion
prion
Design/Logic Flaw
2018-07-10 14:29:00
Code injection
2019-01-15 21:29:00
Denial of service
2019-01-15 18:29:00
ubuntucve
ubuntucve
CVE-2018-10861
2018-07-10 00:00:00
CVE-2018-14662
2019-01-15 00:00:00
CVE-2018-16846
2019-01-15 00:00:00
veracode
veracode
Information Disclosure
2019-08-22 02:27:55
Authorization Bypass
2019-01-15 09:24:15
Denial Of Service (Dos)
2019-08-22 02:27:56
nvd
nvd
CVE-2018-10861
2018-07-10 14:29:00
CVE-2018-14662
2019-01-15 21:29:00
CVE-2018-16846
2019-01-15 18:29:00
cve
cve
CVE-2018-14662
2019-01-15 21:29:00
CVE-2018-16846
2019-01-15 18:29:00
CVE-2018-10861
2018-07-10 14:29:00
cvelist
cvelist
CVE-2018-14662
2019-01-15 21:00:00
CVE-2018-10861
2018-07-09 00:00:00
CVE-2018-16846
2019-01-15 18:00:00
cbl_mariner
cbl_mariner
CVE-2018-1129 affecting package ceph for versions less than 18.2.1-1
2024-04-17 22:02:46
mageia
mageia
Updated kernel packages fix security vulnerabilities
2018-12-22 00:28:39
Updated kernel-linus packages fix security vulnerabilities
2019-02-21 02:50:36
Updated kernel-tmb packages fixes security vulnerabilities
2019-05-16 11:25:22
alpinelinux
alpinelinux
CVE-2020-25660
2020-11-23 22:15:12
archlinux
archlinux
[ASA-202011-22] ceph: multiple issues
2020-11-26 00:00:00

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.1%

JSON
Related for OPENSUSE-2019-1284.NASL
nessus35openvas32suse5redhat6fedora3debian4osv11photon5ubuntu2debiancve6redhatcve6prion6ubuntucve6veracode5nvd6cve6cvelist6cbl_mariner1mageia3alpinelinux1archlinux1