ceph/doc/security/cves.rst

   1
   2 Past vulnerabilities
   3 ====================
   4
   5 +------------+-------------------+-------------+--------------------------------------------+
   6 | Published  | CVE               | Severity    | Summary                                    |
   7 +------------+-------------------+-------------+--------------------------------------------+
   8 | 2021-05-13 | `CVE-2021-3531`_  | Medium      | Swift API denial of service                |
   9 +------------+-------------------+-------------+--------------------------------------------+
  10 | 2021-05-13 | `CVE-2021-3524`_  | Medium      | HTTP header injects via CORS in RGW        |
  11 +------------+-------------------+-------------+--------------------------------------------+
  12 | 2021-05-13 | `CVE-2021-3509`_  | High        | Dashboard XSS via token cookie             |
  13 +------------+-------------------+-------------+--------------------------------------------+
  14 | 2021-04-14 | `CVE-2021-20288`_ | High        | Unauthorized global_id reuse in cephx      |
  15 +------------+-------------------+-------------+--------------------------------------------+
  16 | 2020-12-18 | `CVE-2020-27781`_ | 7.1 High    | CephFS creds read/modified by Manila users |
  17 +------------+-------------------+-------------+--------------------------------------------+
  18 | 2021-01-08 | `CVE-2020-25678`_ | 4.9 Medium  | mgr module passwords in clear text         |
  19 +------------+-------------------+-------------+--------------------------------------------+
  20 | 2020-12-07 | `CVE-2020-25677`_ | 5.5 Medium  | ceph-ansible iscsi-gateway.conf perm       |
  21 +------------+-------------------+-------------+--------------------------------------------+
  22 | 2020-11-23 | `CVE-2020-25660`_ | 8.8 High    | Cephx replay vulnerability                 |
  23 +------------+-------------------+-------------+--------------------------------------------+
  24 | 2020-04-22 | `CVE-2020-12059`_ | 7.5 High    | malformed POST could crash RGW             |
  25 +------------+-------------------+-------------+--------------------------------------------+
  26 | 2020-06-26 | `CVE-2020-10753`_ | 6.5 Medium  | HTTP header injects via CORS in RGW        |
  27 +------------+-------------------+-------------+--------------------------------------------+
  28 | 2020-06-22 | `CVE-2020-10736`_ | 8.0 High    | authorization bypass in mon and mgr        |
  29 +------------+-------------------+-------------+--------------------------------------------+
  30 | 2020-04-23 | `CVE-2020-1760`_  | 6.1 Medium  | potential RGW XSS attack                   |
  31 +------------+-------------------+-------------+--------------------------------------------+
  32 | 2020-04-13 | `CVE-2020-1759`_  | 6.8 Medium  | Cephx nonce reuse in secure mode           |
  33 +------------+-------------------+-------------+--------------------------------------------+
  34 | 2020-02-07 | `CVE-2020-1700`_  | 6.5 Medium  | RGW disconnects leak sockets, can DoS      |
  35 +------------+-------------------+-------------+--------------------------------------------+
  36 | 2020-04-21 | `CVE-2020-1699`_  | 7.5 High    | Dashboard path traversal flaw              |
  37 +------------+-------------------+-------------+--------------------------------------------+
  38 | 2019-12-23 | `CVE-2019-19337`_ | 6.5 Medium  | RGW DoS via malformed headers              |
  39 +------------+-------------------+-------------+--------------------------------------------+
  40 | 2019-11-08 | `CVE-2019-10222`_ | 7.5 High    | Invalid HTTP headers could crash RGW       |
  41 +------------+-------------------+-------------+--------------------------------------------+
  42 | 2019-03-27 | `CVE-2019-3821`_  | 7.5 High    | RGW file descriptors could be exhausted    |
  43 +------------+-------------------+-------------+--------------------------------------------+
  44 | 2019-01-28 | `CVE-2018-16889`_ | 7.5 High    | encryption keys logged in plaintext        |
  45 +------------+-------------------+-------------+--------------------------------------------+
  46 | 2019-01-15 | `CVE-2018-16846`_ | 6.5 Medium  | authenticated RGW users can cause DoS      |
  47 +------------+-------------------+-------------+--------------------------------------------+
  48 | 2019-01-15 | `CVE-2018-14662`_ | 5.7 Medium  | read-only users could steal dm-crypt keys  |
  49 +------------+-------------------+-------------+--------------------------------------------+
  50 | 2018-07-10 | `CVE-2018-10861`_ | 8.1 High    | authenticated user can create/delete pools |
  51 +------------+-------------------+-------------+--------------------------------------------+
  52 | 2018-03-19 | `CVE-2018-7262`_  | 7.5 High    | malformed headers can cause RGW DoS        |
  53 +------------+-------------------+-------------+--------------------------------------------+
  54 | 2018-07-10 | `CVE-2018-1129`_  | 6.5 Medium  | network MITM can tamper with messages      |
  55 +------------+-------------------+-------------+--------------------------------------------+
  56 | 2018-07-10 | `CVE-2018-1128`_  | 7.5 High    | Cephx replay vulnerability                 |
  57 +------------+-------------------+-------------+--------------------------------------------+
  58 | 2018-07-27 | `CVE-2017-7519`_  | 4.4 Medium  | libradosstriper unvalidated format string  |
  59 +------------+-------------------+-------------+--------------------------------------------+
  60 | 2018-08-01 | `CVE-2016-9579`_  | 7.6 High    | potential RGW XSS attack                   |
  61 +------------+-------------------+-------------+--------------------------------------------+
  62 | 2018-07-31 | `CVE-2016-8626`_  | 6.5 Medium  | malformed POST can DoS RGW                 |
  63 +------------+-------------------+-------------+--------------------------------------------+
  64 | 2016-10-03 | `CVE-2016-7031`_  | 7.5 High    | RGW unauthorized bucket listing            |
  65 +------------+-------------------+-------------+--------------------------------------------+
  66 | 2016-07-12 | `CVE-2016-5009`_  | 6.5 Medium  | mon command handler DoS                    |
  67 +------------+-------------------+-------------+--------------------------------------------+
  68 | 2016-12-03 | `CVE-2015-5245`_  |             | RGW header injection                       |
  69 +------------+-------------------+-------------+--------------------------------------------+
  70
  71 .. toctree::
  72    :hidden:
  73    :maxdepth: 0
  74
  75     CVE-2021-3531 <CVE-2021-3531.rst>
  76     CVE-2021-3524 <CVE-2021-3524.rst>
  77     CVE-2021-3509 <CVE-2021-3509.rst>
  78     CVE-2021-20288 <CVE-2021-20288.rst>
  79
  80 .. _CVE-2021-3531: ../CVE-2021-3531
  81 .. _CVE-2021-3524: ../CVE-2021-3524
  82 .. _CVE-2021-3509: ../CVE-2021-3509
  83 .. _CVE-2021-20288: ../CVE-2021-20288
  84 .. _CVE-2020-27781: https://nvd.nist.gov/vuln/detail/CVE-2020-27781
  85 .. _CVE-2020-25678: https://nvd.nist.gov/vuln/detail/CVE-2020-25678
  86 .. _CVE-2020-25677: https://nvd.nist.gov/vuln/detail/CVE-2020-25677
  87 .. _CVE-2020-25660: https://nvd.nist.gov/vuln/detail/CVE-2020-25660
  88 .. _CVE-2020-12059: https://nvd.nist.gov/vuln/detail/CVE-2020-12059
  89 .. _CVE-2020-10753: https://nvd.nist.gov/vuln/detail/CVE-2020-10753
  90 .. _CVE-2020-10736: https://nvd.nist.gov/vuln/detail/CVE-2020-10736
  91 .. _CVE-2020-1760: https://nvd.nist.gov/vuln/detail/CVE-2020-1760
  92 .. _CVE-2020-1759: https://nvd.nist.gov/vuln/detail/CVE-2020-1759
  93 .. _CVE-2020-1700: https://nvd.nist.gov/vuln/detail/CVE-2020-1700
  94 .. _CVE-2020-1699: https://nvd.nist.gov/vuln/detail/CVE-2020-1699
  95 .. _CVE-2019-19337: https://nvd.nist.gov/vuln/detail/CVE-2019-19337
  96 .. _CVE-2019-10222: https://nvd.nist.gov/vuln/detail/CVE-2019-10222
  97 .. _CVE-2019-3821: https://nvd.nist.gov/vuln/detail/CVE-2019-3821
  98 .. _CVE-2018-16889: https://nvd.nist.gov/vuln/detail/CVE-2018-16889
  99 .. _CVE-2018-16846: https://nvd.nist.gov/vuln/detail/CVE-2018-16846
 100 .. _CVE-2018-14662: https://nvd.nist.gov/vuln/detail/CVE-2018-14662
 101 .. _CVE-2018-10861: https://nvd.nist.gov/vuln/detail/CVE-2018-10861
 102 .. _CVE-2018-7262: https://nvd.nist.gov/vuln/detail/CVE-2018-7262
 103 .. _CVE-2018-1129: https://nvd.nist.gov/vuln/detail/CVE-2018-1129
 104 .. _CVE-2018-1128: https://nvd.nist.gov/vuln/detail/CVE-2018-1128
 105 .. _CVE-2017-7519: https://nvd.nist.gov/vuln/detail/CVE-2017-7519
 106 .. _CVE-2016-9579: https://nvd.nist.gov/vuln/detail/CVE-2016-9579
 107 .. _CVE-2016-8626: https://nvd.nist.gov/vuln/detail/CVE-2016-8626
 108 .. _CVE-2016-7031: https://nvd.nist.gov/vuln/detail/CVE-2016-7031
 109 .. _CVE-2016-5009: https://nvd.nist.gov/vuln/detail/CVE-2016-5009
 110 .. _CVE-2015-5245: https://nvd.nist.gov/vuln/detail/CVE-2015-5245