DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Storage: Mehrere Schwachstellen
view advisory published 2022-04-04
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Storage ausnutzen, um Dateien zu manipulieren, einen Denial of Service Zustand herbeizuführen oder Sicherheitsvorkehrungen zu umgehen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-3979US | medium6.5OT elevated | — | ||
A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random ke… | ||||
| CVE-2021-3531US | medium5.3 | — | ||
A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a GET Request for a swift URL that ends with two slashes it can cause the rgw to crash,… | ||||
| CVE-2021-3524US | medium6.5 | — | ||
A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21. The vulnerability is related to the injection of HTTP headers via a CORS Expo… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2022:1716 vom 2022-05-06external
- Red Hat Security Advisory RHSA-2022:1174 vom 2022-04-04external
- Debian Security Advisory DLA-3629 vom 2023-10-23external
- Debian Security Advisory DLA-4310 vom 2025-09-25external
- SUSE Security Update SUSE-SU-2022:2817-1 vom 2022-08-16external
- SUSE Security Update SUSE-SU-2022:2818-1 vom 2022-08-16external
- SUSE Security Update SUSE-SU-2022:4501-1 vom 2022-12-15external
- Ubuntu Security Notice USN-7706-1 vom 2025-08-21external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan