ID CVE-2015-5245
Summary CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted bucket name. <a href="http://cwe.mitre.org/data/definitions/113.html">CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')</a>
References
Vulnerable Configurations
  • cpe:2.3:a:redhat:ceph:0.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.7:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.7.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.7.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.7.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.8:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.9:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.9:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.10:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.10:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.11:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.11:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.12:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.12:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.13:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.13:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.14:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.14:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.15:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.15:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.16:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.16:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.16.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.16.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.17:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.17:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.18:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.18:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.19:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.19:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.19.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.19.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.20:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.20:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.20.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.20.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.20.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.20.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.21:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.21:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.21.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.21.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.21.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.21.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.21.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.21.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.22:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.22:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.22.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.22.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.22.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.22.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.23:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.23:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.23.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.23.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.23.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.23.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.24:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.24:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.24.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.24.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.24.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.24.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.24.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.24.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.25:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.25:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.25.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.25.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.25.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.25.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.26:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.26:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.27:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.27:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.27.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.27.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.28:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.28:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.28.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.28.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.28.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.28.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.29:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.29:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.29.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.29.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.30:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.30:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.31:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.31:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.32:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.32:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.33:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.33:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.34:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.34:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.35:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.35:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.36:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.36:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.37:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.37:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.38:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.38:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.39:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.39:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.40:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.40:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.41:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.41:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.42:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.42:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.42.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.42.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.42.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.42.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.43:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.43:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.44:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.44:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.44.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.44.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.44.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.44.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.45:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.45:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.46:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.46:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.47:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.47:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.47.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.47.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.47.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.47.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.47.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.47.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.48:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.48:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.48.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.48.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.48.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.48.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.48.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.48.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.49:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.49:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.50:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.50:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.51:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.51:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.52:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.52:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.53:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.53:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.54:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.54:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.55:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.55:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.55.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.55.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.56:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.56:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.56.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.56.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.56.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.56.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.56.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.56.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.56.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.56.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.56.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.56.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.56.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.56.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.56.7:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.56.7:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.57:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.57:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.58:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.58:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.59:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.59:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.60:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.60:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.61:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.61:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.61.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.61.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.61.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.61.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.61.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.61.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.61.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.61.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.61.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.61.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.61.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.61.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.61.7:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.61.7:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.61.8:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.61.8:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.61.9:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.61.9:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.62:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.62:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.63:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.63:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.64:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.64:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.65:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.65:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.66:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.66:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.67:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.67:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.67:rc1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.67:rc1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.67:rc2:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.67:rc2:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.67:rc3:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.67:rc3:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.67.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.67.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.67.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.67.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.67.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.67.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.67.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.67.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.67.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.67.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.67.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.67.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.67.7:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.67.7:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.67.8:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.67.8:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.67.9:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.67.9:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.67.10:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.67.10:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.67.11:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.67.11:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.68:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.68:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.69:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.69:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.70:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.70:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.71:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.71:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.72:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.72:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.72:rc1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.72:rc1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.72.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.72.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.72.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.72.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.73:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.73:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.74:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.74:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.75:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.75:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.76:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.76:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.77:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.77:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.78:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.78:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.79:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.79:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.80:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.80:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.80:rc1:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.80:rc1:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.80.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.80.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.80.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.80.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.80.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.80.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.80.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.80.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.80.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.80.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.80.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.80.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.80.7:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.80.7:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.80.8:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.80.8:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.80.8.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.80.8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.80.8.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.80.8.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.80.8.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.80.8.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.80.8.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.80.8.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.80.9:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.80.9:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.80.10:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.80.10:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.80.11:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.80.11:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.81:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.81:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.82:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.82:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.83:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.83:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.84:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.84:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.85:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.85:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.86:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.86:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.87:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.87:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.87.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.87.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.87.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.87.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.88:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.88:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.89:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.89:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.90:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.90:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.91:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.91:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.92:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.92:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.93:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.93:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.94:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.94:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.94.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.94.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.94.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.94.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.94.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.94.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.94.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.94.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.94.1.4:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.94.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.94.1.5:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.94.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.94.1.6:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.94.1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.94.1.7:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.94.1.7:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.94.2:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.94.2:*:*:*:*:*:*:*
  • cpe:2.3:a:redhat:ceph:0.94.3:*:*:*:*:*:*:*
    cpe:2.3:a:redhat:ceph:0.94.3:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 04-12-2015 - 16:15)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:P/A:N
redhat via4
advisories
rhsa
id RHSA-2015:2512
rpms
  • babeltrace-0:1.2.4-3.el7cp
  • babeltrace-debuginfo-0:1.2.4-3.el7cp
  • calamari-server-0:1.3-11.el7cp
  • ceph-1:0.94.3-3.el7cp
  • ceph-common-1:0.94.3-3.el7cp
  • ceph-debuginfo-1:0.94.3-3.el7cp
  • ceph-deploy-0:1.5.27.3-1.el7cp
  • ceph-mon-1:0.94.3-3.el7cp
  • ceph-osd-1:0.94.3-3.el7cp
  • ceph-puppet-modules-0:0.1.1-1.el7cp
  • ceph-radosgw-1:0.94.3-3.el7cp
  • ceph-test-1:0.94.3-3.el7cp
  • facter-1:1.7.6-2.1.el7sat
  • facter-debuginfo-1:1.7.6-2.1.el7sat
  • foreman-0:1.7.2.33-1.el7sat
  • foreman-debug-0:1.7.2.33-1.el7sat
  • foreman-installer-1:1.7.5-2.el7cp
  • foreman-postgresql-0:1.7.2.33-1.el7sat
  • foreman-proxy-0:1.7.2.5-1.el7sat
  • foreman-release-0:1.7.2.33-1.el7sat
  • foreman-selinux-0:1.7.2.13-1.el7sat
  • foreman-sqlite-0:1.7.2.33-1.el7sat
  • hiera-0:1.3.1-2.el7
  • ipxe-bootimgs-0:20130517-7.1fm.gitc4bce43.el7sat
  • ipxe-roms-0:20130517-7.1fm.gitc4bce43.el7sat
  • ipxe-roms-qemu-0:20130517-7.1fm.gitc4bce43.el7sat
  • libbabeltrace-0:1.2.4-3.el7cp
  • librados2-1:0.94.3-3.el7cp
  • librados2-devel-1:0.94.3-3.el7cp
  • librbd1-1:0.94.3-3.el7cp
  • librbd1-devel-1:0.94.3-3.el7cp
  • lttng-tools-0:2.4.1-1.el7cp
  • lttng-tools-debuginfo-0:2.4.1-1.el7cp
  • lttng-ust-0:2.4.1-1.el7cp
  • lttng-ust-debuginfo-0:2.4.1-1.el7cp
  • mod_passenger-0:4.0.18-19.el7sat
  • puppet-0:3.6.2-4.el7sat
  • puppet-server-0:3.6.2-4.el7sat
  • python-rados-1:0.94.3-3.el7cp
  • python-rbd-1:0.94.3-3.el7cp
  • radosgw-agent-0:1.2.3-1.el7cp
  • rhcs-installer-0:0.1.0-1.el7cp
  • ruby-augeas-0:0.5.0-1.el7
  • ruby-augeas-debuginfo-0:0.5.0-1.el7
  • ruby-rgen-0:0.6.5-2.el7sat
  • ruby-shadow-0:1.4.1-21.el7
  • ruby-shadow-debuginfo-0:1.4.1-21.el7
  • ruby193-facter-0:1.6.18-5.el7sat
  • ruby193-ruby-wrapper-0:0.0.2-6.el7sat
  • ruby193-rubygem-ancestry-0:2.0.0-1.el7sat
  • ruby193-rubygem-apipie-rails-0:0.2.5-1.el7sat
  • ruby193-rubygem-audited-0:3.0.0-5.el7sat
  • ruby193-rubygem-audited-activerecord-0:3.0.0-8.el7sat
  • ruby193-rubygem-bundler_ext-0:0.3.0-6.el7sat
  • ruby193-rubygem-deep_cloneable-0:2.0.0-4.el7
  • ruby193-rubygem-fast_gettext-0:0.8.0-13.el7sat
  • ruby193-rubygem-foreigner-0:1.4.2-1.el7sat
  • ruby193-rubygem-foreman_bootdisk-0:4.0.2.13-1.el7sat
  • ruby193-rubygem-friendly_id-0:4.0.10.1-1.el7
  • ruby193-rubygem-gettext_i18n_rails-0:0.10.0-3.el7sat
  • ruby193-rubygem-gettext_i18n_rails_js-0:0.0.8-3.el7sat
  • ruby193-rubygem-i18n_data-0:0.2.7-5.el7sat
  • ruby193-rubygem-ldap_fluff-0:0.3.2-1.el7
  • ruby193-rubygem-multi_json-0:1.8.2-4.el7sat
  • ruby193-rubygem-net-ldap-0:0.3.1-3.el7sat
  • ruby193-rubygem-oauth-0:0.4.7-8.el7sat
  • ruby193-rubygem-passenger-0:4.0.18-19.el7sat
  • ruby193-rubygem-passenger-debuginfo-0:4.0.18-19.el7sat
  • ruby193-rubygem-passenger-native-0:4.0.18-19.el7sat
  • ruby193-rubygem-passenger-native-libs-0:4.0.18-19.el7sat
  • ruby193-rubygem-pg-0:0.12.2-10.el7sat
  • ruby193-rubygem-pg-debuginfo-0:0.12.2-10.el7sat
  • ruby193-rubygem-po_to_json-0:0.0.7-3.el7sat
  • ruby193-rubygem-rabl-0:0.9.0-1.el7sat
  • ruby193-rubygem-rest-client-0:1.6.7-1.el7sat
  • ruby193-rubygem-ruby2ruby-0:2.0.1-9.el7sat
  • ruby193-rubygem-ruby_parser-0:3.1.1-15.el7sat
  • ruby193-rubygem-safemode-0:1.2.1-1.el7sat
  • ruby193-rubygem-scoped_search-0:2.7.1-2.el7sat
  • ruby193-rubygem-secure_headers-0:1.3.3-1.el7
  • ruby193-rubygem-sexp_processor-0:4.1.3-7.el7sat
  • ruby193-rubygem-sprockets-0:2.10.1-3.el7sat
  • ruby193-rubygem-uuidtools-0:2.1.3-6.el7sat
  • ruby193-rubygem-validates_lengths_from_database-0:0.2.0-1.3.el7sat
  • ruby193-rubygem-will_paginate-0:3.0.2-10.el7sat
  • rubygem-ansi-0:1.4.3-3.el7sat
  • rubygem-apipie-bindings-0:0.0.11-1.el7
  • rubygem-awesome_print-0:1.0.2-12.el7sat
  • rubygem-bundler_ext-0:0.3.0-7.el7sat
  • rubygem-clamp-0:0.6.2-2.el7sat
  • rubygem-ffi-0:1.4.0-3.el7sat
  • rubygem-ffi-debuginfo-0:1.4.0-3.el7sat
  • rubygem-gssapi-0:1.1.2-4.el7sat
  • rubygem-hashie-0:2.0.5-2.el7sat
  • rubygem-highline-0:1.6.21-1.el7sat
  • rubygem-kafo-0:0.6.5.9-1.el7sat
  • rubygem-kafo_parsers-0:0.0.4.4-1.el7sat
  • rubygem-little-plugger-0:1.1.3-17.el7sat
  • rubygem-logging-0:1.8.1-26.el7sat
  • rubygem-mime-types-0:1.19-7.el7sat
  • rubygem-multi_json-0:1.8.2-4.el7sat
  • rubygem-oauth-0:0.4.7-8.el7sat
  • rubygem-passenger-0:4.0.18-19.el7sat
  • rubygem-passenger-debuginfo-0:4.0.18-19.el7sat
  • rubygem-passenger-native-0:4.0.18-19.el7sat
  • rubygem-passenger-native-libs-0:4.0.18-19.el7sat
  • rubygem-powerbar-0:1.0.11-8.el7sat
  • rubygem-rack-1:1.4.1-13.el7sat
  • rubygem-rack-protection-0:1.5.0-7.el7sat
  • rubygem-rake-0:0.9.2.2-41.el7sat
  • rubygem-rest-client-0:1.6.7-1.el7sat
  • rubygem-rkerberos-0:0.1.2-3.el7sat
  • rubygem-rkerberos-debuginfo-0:0.1.2-3.el7sat
  • rubygem-rubyipmi-0:0.10.0-1.el7sat
  • rubygem-sinatra-1:1.3.6-27.el7sat
  • rubygem-smart_proxy_discovery-0:1.0.2.1-1.el7sat
  • rubygem-tilt-0:1.3.3-18.el7sat
  • userspace-rcu-0:0.7.9-2.el7rhgs
  • userspace-rcu-debuginfo-0:0.7.9-2.el7rhgs
refmap via4
confirm http://tracker.ceph.com/issues/12537
mlist [Ceph-announce] 20151019 v0.94.4 Hammer released
Last major update 04-12-2015 - 16:15
Published 03-12-2015 - 20:59
Last modified 04-12-2015 - 16:15
Back to Top