Debian: DLA-2735-1 Moderate: Ceph Security Flaws Repaired

debian lts

August 10, 2021

Several vulnerabilities were discovered in Ceph, a distributed storage and file system

Topics Covered

security advisory moderate denial of service encryption Debian system update Ceph

Summary

Authenticated ceph users with read only permissions could steal dm-crypt
encryption keys used in ceph disk encryption.

CVE-2018-16846

Authenticated ceph RGW users can cause a denial of service against OMAPs
holding bucket indices.

CVE-2020-10753

A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object
Gateway).
The vulnerability is related to the injection of HTTP headers via a CORS
ExposeHeader tag. The newline character in the ExposeHeader tag in the
CORS configuration file generates a header injection in the response when
the CORS request is made.

CVE-2020-1760

A flaw was found in the Ceph Object Gateway, where it supports request
sent by an anonymous user in Amazon S3. This flaw could lead to potential
XSS attacks due to the lack of proper neutralization of untrusted input.

CVE-2021-3524

A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway)