Advisories · Technology
Red Hat Ceph Storage 9.
Every CVE that names Red Hat Ceph Storage 9 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder
- Red Hat Ceph Storage 9
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 4.3 Medium
Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check
- Red Hat Ceph Storage 9
- Red Hat Enterprise Linux 10
- Broken access control
- CVSS 6.8 Medium
Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content
- Red Hat Ceph Storage 9
- Red Hat Enterprise Linux 10
- CWE-672
- CVSS 5.3 Medium
Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation
- Red Hat Ceph Storage 9
- Red Hat Enterprise Linux 10
- Denial of service
- CVSS 5.3 Medium
Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms
- Red Hat Ceph Storage 9
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 6.8 Medium
Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations
- Red Hat Ceph Storage 9
- Red Hat Enterprise Linux 10
- CWE-345
- CVSS 6.1 Medium
Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough
- Red Hat Hardened Images
- Red Hat Ceph Storage 4
- Memory corruption
- CVSS 6.8 Medium
Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure
- Red Hat Ceph Storage 5
- Red Hat Ceph Storage 9
- Weak cryptography or TLS
- CVSS 8.1 High
Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution on the ansible controller
- Red Hat Ceph Storage 5
- Red Hat Ceph Storage 9
- Insecure deserialization
- CVSS 5.5 Medium
Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings
- Red Hat Ceph Storage 5
- Red Hat Ceph Storage 9
- CWE-214
- CVSS 6.1 Medium
Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames
- util-linux
- Red Hat Enterprise Linux 10
- Memory corruption