Lucene search
RedHatRHSA-2016:2994HistoryDec 21, 2016 - 4:43 p.m.
(RHSA-2016:2994) Moderate: Red Hat Ceph Storage 1.3 security update
2016-12-2116:43:55
access.redhat.com
27
0.007 Low
EPSS
Percentile
80.0%
Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support services.
Security Fix(es):
- A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket. A remote unauthenticated attacker could use this flaw to cause denial of service by sending a specially-crafted cross-origin HTTP request. (CVE-2016-9579)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | x86_64 | python-rados | < 0.94.9-9.el7cp | python-rados-0.94.9-9.el7cp.x86_64.rpm |
| RedHat | 7 | x86_64 | ceph-radosgw | < 0.94.9-9.el7cp | ceph-radosgw-0.94.9-9.el7cp.x86_64.rpm |
| RedHat | 7 | x86_64 | librados2-devel | < 0.94.9-9.el7cp | librados2-devel-0.94.9-9.el7cp.x86_64.rpm |
| RedHat | 7 | x86_64 | librados2 | < 0.94.9-9.el7cp | librados2-0.94.9-9.el7cp.x86_64.rpm |
| RedHat | 7 | x86_64 | librbd1 | < 0.94.9-9.el7cp | librbd1-0.94.9-9.el7cp.x86_64.rpm |
| RedHat | 7 | x86_64 | ceph-mon | < 0.94.9-9.el7cp | ceph-mon-0.94.9-9.el7cp.x86_64.rpm |
| RedHat | 7 | x86_64 | ceph | < 0.94.9-9.el7cp | ceph-0.94.9-9.el7cp.x86_64.rpm |
| RedHat | 7 | x86_64 | ceph-common | < 0.94.9-9.el7cp | ceph-common-0.94.9-9.el7cp.x86_64.rpm |
| RedHat | 7 | x86_64 | librbd1-devel | < 0.94.9-9.el7cp | librbd1-devel-0.94.9-9.el7cp.x86_64.rpm |
| RedHat | 7 | x86_64 | ceph-osd | < 0.94.9-9.el7cp | ceph-osd-0.94.9-9.el7cp.x86_64.rpm |
Related
nessus
nessus
RHEL 7 : Red Hat Ceph Storage 1.3 (RHSA-2016:2994)
2018-06-06 00:00:00
openSUSE Security Update : ceph (openSUSE-2017-421)
2017-04-04 00:00:00
RHEL 7 : Red Hat Ceph Storage 2.1 (RHSA-2016:2954)
2018-06-06 00:00:00
cvelist
cvelist
CVE-2016-9579
2018-08-01 16:00:00
nvd
nvd
CVE-2016-9579
2018-08-01 16:29:00
veracode
veracode
Cross-origin Resource Sharing Policy Bypass
2019-01-15 09:14:40
redhat
redhat
redhatcve
redhatcve
CVE-2016-9579
2016-12-09 14:45:38
cve
cve
CVE-2016-9579
2018-08-01 16:29:00
osv
osv
CVE-2016-9579
2018-08-01 16:29:00
prion
prion
Design/Logic Flaw
2018-08-01 16:29:00
debiancve
debiancve
CVE-2016-9579
2018-08-01 16:29:00
ubuntucve
ubuntucve
CVE-2016-9579
2016-12-12 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-3452-1)
2017-10-12 00:00:00
ubuntu
ubuntu
Ceph vulnerabilities
2017-10-11 00:00:00