(RHSA-2018:0546) Important: ceph security update

2018-03-1518:08:22

access.redhat.com

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.006 Low

EPSS

Percentile

78.0%

JSON

Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a Ceph management platform, deployment utilities, and support services.

Security Fix(es):

ceph: Unauthenticated malformed HTTP requests handled by rgw_civetweb.cc:RGW::init_env() can lead to denial of service (CVE-2018-7262)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat7x86_64ceph-osd< 12.2.1-46.el7cpceph-osd-12.2.1-46.el7cp.x86_64.rpm
RedHat7x86_64ceph-fuse< 12.2.1-46.el7cpceph-fuse-12.2.1-46.el7cp.x86_64.rpm
RedHat7x86_64ceph-common< 12.2.1-46.el7cpceph-common-12.2.1-46.el7cp.x86_64.rpm
RedHat7x86_64python-rados< 12.2.1-46.el7cppython-rados-12.2.1-46.el7cp.x86_64.rpm
RedHat7x86_64librbd-devel< 12.2.1-46.el7cplibrbd-devel-12.2.1-46.el7cp.x86_64.rpm
RedHat7x86_64librbd1< 12.2.1-46.el7cplibrbd1-12.2.1-46.el7cp.x86_64.rpm
RedHat7x86_64ceph-mds< 12.2.1-46.el7cpceph-mds-12.2.1-46.el7cp.x86_64.rpm
RedHat7x86_64librgw2< 12.2.1-46.el7cplibrgw2-12.2.1-46.el7cp.x86_64.rpm
RedHat7x86_64libradosstriper1< 12.2.1-46.el7cplibradosstriper1-12.2.1-46.el7cp.x86_64.rpm
RedHat7x86_64python-rbd< 12.2.1-46.el7cppython-rbd-12.2.1-46.el7cp.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	7	x86_64	ceph-osd	< 12.2.1-46.el7cp	ceph-osd-12.2.1-46.el7cp.x86_64.rpm
RedHat	7	x86_64	ceph-fuse	< 12.2.1-46.el7cp	ceph-fuse-12.2.1-46.el7cp.x86_64.rpm
RedHat	7	x86_64	ceph-common	< 12.2.1-46.el7cp	ceph-common-12.2.1-46.el7cp.x86_64.rpm
RedHat	7	x86_64	python-rados	< 12.2.1-46.el7cp	python-rados-12.2.1-46.el7cp.x86_64.rpm
RedHat	7	x86_64	librbd-devel	< 12.2.1-46.el7cp	librbd-devel-12.2.1-46.el7cp.x86_64.rpm
RedHat	7	x86_64	librbd1	< 12.2.1-46.el7cp	librbd1-12.2.1-46.el7cp.x86_64.rpm
RedHat	7	x86_64	ceph-mds	< 12.2.1-46.el7cp	ceph-mds-12.2.1-46.el7cp.x86_64.rpm
RedHat	7	x86_64	librgw2	< 12.2.1-46.el7cp	librgw2-12.2.1-46.el7cp.x86_64.rpm
RedHat	7	x86_64	libradosstriper1	< 12.2.1-46.el7cp	libradosstriper1-12.2.1-46.el7cp.x86_64.rpm
RedHat	7	x86_64	python-rbd	< 12.2.1-46.el7cp	python-rbd-12.2.1-46.el7cp.x86_64.rpm