Red Hat Security AdvisoryRHSA-2024:2633
updated rhceph-6.1 container image
Released 2024-05-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ceph Storage 6.1 Tools rhceph/keepalived-rhel9, rhceph/rhceph-6-dashboard-rhel9, rhceph/rhceph-6-rhel9 +3
Fixes 3 records
Priority CRITICAL 90KEV
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.99999 · Published 2023-10-10 · Partial fix · 1.28.0, 0.17.0 +9 CWE-400
Priority MEDIUM 52
A path traversal vulnerability was discovered in go-git versions prior to v5.11.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0151 · Published 2024-01-12 · Partial fix · 5.11.0 CWE-22
Priority LOW 39
A user with the permissions to create a data source can use Grafana API to create a data source with UID set to *.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00802 · Published 2024-03-07 · Partial fix · 9.5.7, 10.0.12 +3 CWE-269
