Red Hat Security Advisory

RHSA-2015:2512

Red Hat Ceph Storage 1.3.1 security, bug fix, and enhancement update

Released 2015-11-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Ceph Storage 1.3 for Ubuntu

Fixes 1 record

TI-2015-04405 CVE-2015-5245 · GHSA-782g-wgjp-wr8j

CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph…

LOW 24

CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted bucket…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01907 Published 2015-12-03 Partial fix