USN-3452-1
- Source
- https://ubuntu.com/security/notices/USN-3452-1
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3452-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/USN-3452-1
- Related
- Published
- 2017-10-11T12:07:23.360744Z
- Modified
- 2017-10-11T12:07:23.360744Z
- Summary
- ceph vulnerabilities
- Details
-
It was discovered that Ceph incorrectly handled the handle_command function. A remote authenticated user could use this issue to cause Ceph to crash, resulting in a denial of service. (CVE-2016-5009)
Rahul Aggarwal discovered that Ceph incorrectly handled the authenticated-read ACL. A remote attacker could possibly use this issue to list bucket contents via a URL. (CVE-2016-7031)
Diluga Salome discovered that Ceph incorrectly handled certain POST objects with null conditions. A remote attacker could possibly use this issue to cuase Ceph to crash, resulting in a denial of service. (CVE-2016-8626)
Yang Liu discovered that Ceph incorrectly handled invalid HTTP Origin headers. A remote attacker could possibly use this issue to cuase Ceph to crash, resulting in a denial of service. (CVE-2016-9579)
- References
Affected packages
Ubuntu:14.04:LTS / ceph
Package
- Name
- ceph
- Purl
- pkg:deb/ubuntu/ceph?arch=src?distro=trusty
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed0.80.11-0ubuntu1.14.04.3
Affected versions
0.*
0.67.4-0ubuntu2
0.67.4-0ubuntu3
0.72-0ubuntu1
0.72.1-0ubuntu1
0.72.1-2
0.72.1-3
0.72.2-1
0.72.2-2
0.78-0ubuntu1
0.79-0ubuntu1
0.80.1-0ubuntu1
0.80.1-0ubuntu1.1
0.80.5-0ubuntu0.14.04.1
0.80.7-0ubuntu0.14.04.1
0.80.9-0ubuntu0.14.04.1
0.80.9-0ubuntu0.14.04.2
0.80.10-0ubuntu0.14.04.1
0.80.10-0ubuntu1.14.04.2
0.80.10-0ubuntu1.14.04.3
0.80.11-0ubuntu1.14.04.1
0.80.11-0ubuntu1.14.04.2
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "ceph"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "ceph-common"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "ceph-common-dbg"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "ceph-common-dbgsym"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "ceph-dbg"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "ceph-dbgsym"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "ceph-fs-common"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "ceph-fs-common-dbg"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "ceph-fs-common-dbgsym"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "ceph-fuse"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "ceph-fuse-dbg"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "ceph-fuse-dbgsym"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "ceph-mds"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "ceph-mds-dbg"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "ceph-mds-dbgsym"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "ceph-resource-agents"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "ceph-test"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "ceph-test-dbg"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "ceph-test-dbgsym"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "libcephfs-dev"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "libcephfs-java"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "libcephfs-jni"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "libcephfs-jni-dbg"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "libcephfs-jni-dbgsym"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "libcephfs1"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "libcephfs1-dbg"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "libcephfs1-dbgsym"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "librados-dev"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "librados-dev-dbgsym"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "librados2"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "librados2-dbg"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "librados2-dbgsym"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "librbd-dev"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "librbd1"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "librbd1-dbg"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "librbd1-dbgsym"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "python-ceph"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "radosgw"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "radosgw-dbg"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "radosgw-dbgsym"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "rbd-fuse"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "rbd-fuse-dbg"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "rbd-fuse-dbgsym"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "rest-bench"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "rest-bench-dbg"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.3",
"binary_name": "rest-bench-dbgsym"
}
]
}