CVE-2015-5245
Fixed in a distro release EPSS 2%
CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted bucket name.
Products: redhat ceph
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | ceph | 0.80.10-1 |
| Debian 13 | ceph | 0.80.10-1 |
| Debian 14 | ceph | 0.80.10-1 |
| Red Hat ceph storage 1.3 | babeltrace | 0:1.2.4-3.el7cp |
| Red Hat ceph storage 1.3 | babeltrace-debuginfo | 0:1.2.4-3.el7cp |
| Red Hat ceph storage 1.3 | calamari-server | 0:1.3-11.el7cp |
| Red Hat ceph storage 1.3 | ceph | 1:0.94.3-3.el7cp |
| Red Hat ceph storage 1.3 | ceph-common | 1:0.94.3-3.el7cp |
| Red Hat ceph storage 1.3 | ceph-debuginfo | 1:0.94.3-3.el7cp |
| Red Hat ceph storage 1.3 | ceph-deploy | 0:1.5.27.3-1.el7cp |
| Red Hat ceph storage 1.3 | ceph-mon | 1:0.94.3-3.el7cp |
| Red Hat ceph storage 1.3 | ceph-osd | 1:0.94.3-3.el7cp |
| Red Hat ceph storage 1.3 | ceph-puppet-modules | 0:0.1.1-1.el7cp |
| Red Hat ceph storage 1.3 | ceph-radosgw | 1:0.94.3-3.el7cp |
| Red Hat ceph storage 1.3 | ceph-test | 1:0.94.3-3.el7cp |
| Red Hat ceph storage 1.3 | facter | 1:1.7.6-2.1.el7sat |
| Red Hat ceph storage 1.3 | facter-debuginfo | 1:1.7.6-2.1.el7sat |
| Red Hat ceph storage 1.3 | foreman | 0:1.7.2.33-1.el7sat |
| Red Hat ceph storage 1.3 | foreman-debug | 0:1.7.2.33-1.el7sat |
| Red Hat ceph storage 1.3 | foreman-installer | 1:1.7.5-2.el7cp |
| Red Hat ceph storage 1.3 | foreman-postgresql | 0:1.7.2.33-1.el7sat |
| Red Hat ceph storage 1.3 | foreman-proxy | 0:1.7.2.5-1.el7sat |
| Red Hat ceph storage 1.3 | foreman-release | 0:1.7.2.33-1.el7sat |
| Red Hat ceph storage 1.3 | foreman-selinux | 0:1.7.2.13-1.el7sat |
| Red Hat ceph storage 1.3 | foreman-sqlite | 0:1.7.2.33-1.el7sat |
| Red Hat ceph storage 1.3 | hiera | 0:1.3.1-2.el7 |
| Red Hat ceph storage 1.3 | ipxe | 0:20130517-7.1fm.gitc4bce43.el7sat |
| Red Hat ceph storage 1.3 | ipxe-bootimgs | 0:20130517-7.1fm.gitc4bce43.el7sat |
| Red Hat ceph storage 1.3 | ipxe-roms | 0:20130517-7.1fm.gitc4bce43.el7sat |
| Red Hat ceph storage 1.3 | ipxe-roms-qemu | 0:20130517-7.1fm.gitc4bce43.el7sat |
| Red Hat ceph storage 1.3 | libbabeltrace | 0:1.2.4-3.el7cp |
| Red Hat ceph storage 1.3 | librados2 | 1:0.94.3-3.el7cp |
| Red Hat ceph storage 1.3 | librados2-devel | 1:0.94.3-3.el7cp |
| Red Hat ceph storage 1.3 | librbd1 | 1:0.94.3-3.el7cp |
| Red Hat ceph storage 1.3 | librbd1-devel | 1:0.94.3-3.el7cp |
| Red Hat ceph storage 1.3 | lttng-tools | 0:2.4.1-1.el7cp |
| Red Hat ceph storage 1.3 | lttng-tools-debuginfo | 0:2.4.1-1.el7cp |
| Red Hat ceph storage 1.3 | lttng-ust | 0:2.4.1-1.el7cp |
| Red Hat ceph storage 1.3 | lttng-ust-debuginfo | 0:2.4.1-1.el7cp |
| Red Hat ceph storage 1.3 | mod_passenger | 0:4.0.18-19.el7sat |
| Red Hat ceph storage 1.3 | puppet | 0:3.6.2-4.el7sat |
| Red Hat ceph storage 1.3 | puppet-server | 0:3.6.2-4.el7sat |
| Red Hat ceph storage 1.3 | python-rados | 1:0.94.3-3.el7cp |
| Red Hat ceph storage 1.3 | python-rbd | 1:0.94.3-3.el7cp |
| Red Hat ceph storage 1.3 | radosgw-agent | 0:1.2.3-1.el7cp |
| Red Hat ceph storage 1.3 | rhcs-installer | 0:0.1.0-1.el7cp |
| Red Hat ceph storage 1.3 | ruby-augeas | 0:0.5.0-1.el7 |
| Red Hat ceph storage 1.3 | ruby-augeas-debuginfo | 0:0.5.0-1.el7 |
| Red Hat ceph storage 1.3 | ruby-rgen | 0:0.6.5-2.el7sat |
| Red Hat ceph storage 1.3 | ruby-shadow | 0:1.4.1-21.el7 |
| Red Hat ceph storage 1.3 | ruby-shadow-debuginfo | 0:1.4.1-21.el7 |
| Red Hat ceph storage 1.3 | ruby193-facter | 0:1.6.18-5.el7sat |
| Red Hat ceph storage 1.3 | ruby193-ruby-wrapper | 0:0.0.2-6.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-ancestry | 0:2.0.0-1.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-apipie-rails | 0:0.2.5-1.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-audited | 0:3.0.0-5.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-audited-activerecord | 0:3.0.0-8.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-bundler_ext | 0:0.3.0-6.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-deep_cloneable | 0:2.0.0-4.el7 |
| Red Hat ceph storage 1.3 | ruby193-rubygem-fast_gettext | 0:0.8.0-13.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-foreigner | 0:1.4.2-1.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-foreman_bootdisk | 0:4.0.2.13-1.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-friendly_id | 0:4.0.10.1-1.el7 |
| Red Hat ceph storage 1.3 | ruby193-rubygem-gettext_i18n_rails | 0:0.10.0-3.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-gettext_i18n_rails_js | 0:0.0.8-3.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-i18n_data | 0:0.2.7-5.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-ldap_fluff | 0:0.3.2-1.el7 |
| Red Hat ceph storage 1.3 | ruby193-rubygem-multi_json | 0:1.8.2-4.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-net-ldap | 0:0.3.1-3.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-oauth | 0:0.4.7-8.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-passenger | 0:4.0.18-19.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-passenger-debuginfo | 0:4.0.18-19.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-passenger-native | 0:4.0.18-19.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-passenger-native-libs | 0:4.0.18-19.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-pg | 0:0.12.2-10.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-pg-debuginfo | 0:0.12.2-10.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-po_to_json | 0:0.0.7-3.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-rabl | 0:0.9.0-1.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-rest-client | 0:1.6.7-1.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-ruby2ruby | 0:2.0.1-9.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-ruby_parser | 0:3.1.1-15.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-safemode | 0:1.2.1-1.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-scoped_search | 0:2.7.1-2.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-secure_headers | 0:1.3.3-1.el7 |
| Red Hat ceph storage 1.3 | ruby193-rubygem-sexp_processor | 0:4.1.3-7.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-sprockets | 0:2.10.1-3.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-uuidtools | 0:2.1.3-6.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-validates_lengths_from_database | 0:0.2.0-1.3.el7sat |
| Red Hat ceph storage 1.3 | ruby193-rubygem-will_paginate | 0:3.0.2-10.el7sat |
| Red Hat ceph storage 1.3 | rubygem-ansi | 0:1.4.3-3.el7sat |
| Red Hat ceph storage 1.3 | rubygem-apipie-bindings | 0:0.0.11-1.el7 |
| Red Hat ceph storage 1.3 | rubygem-awesome_print | 0:1.0.2-12.el7sat |
| Red Hat ceph storage 1.3 | rubygem-bundler_ext | 0:0.3.0-7.el7sat |
| Red Hat ceph storage 1.3 | rubygem-clamp | 0:0.6.2-2.el7sat |
| Red Hat ceph storage 1.3 | rubygem-ffi | 0:1.4.0-3.el7sat |
| Red Hat ceph storage 1.3 | rubygem-ffi-debuginfo | 0:1.4.0-3.el7sat |
| Red Hat ceph storage 1.3 | rubygem-gssapi | 0:1.1.2-4.el7sat |
| Red Hat ceph storage 1.3 | rubygem-hashie | 0:2.0.5-2.el7sat |
| Red Hat ceph storage 1.3 | rubygem-highline | 0:1.6.21-1.el7sat |
| Red Hat ceph storage 1.3 | rubygem-kafo | 0:0.6.5.9-1.el7sat |
| Red Hat ceph storage 1.3 | rubygem-kafo_parsers | 0:0.0.4.4-1.el7sat |
| Red Hat ceph storage 1.3 | rubygem-little-plugger | 0:1.1.3-17.el7sat |
| Red Hat ceph storage 1.3 | rubygem-logging | 0:1.8.1-26.el7sat |
| Red Hat ceph storage 1.3 | rubygem-mime-types | 0:1.19-7.el7sat |
| Red Hat ceph storage 1.3 | rubygem-multi_json | 0:1.8.2-4.el7sat |
| Red Hat ceph storage 1.3 | rubygem-oauth | 0:0.4.7-8.el7sat |
| Red Hat ceph storage 1.3 | rubygem-passenger | 0:4.0.18-19.el7sat |
| Red Hat ceph storage 1.3 | rubygem-passenger-debuginfo | 0:4.0.18-19.el7sat |
| Red Hat ceph storage 1.3 | rubygem-passenger-native | 0:4.0.18-19.el7sat |
| Red Hat ceph storage 1.3 | rubygem-passenger-native-libs | 0:4.0.18-19.el7sat |
| Red Hat ceph storage 1.3 | rubygem-powerbar | 0:1.0.11-8.el7sat |
| Red Hat ceph storage 1.3 | rubygem-rack | 1:1.4.1-13.el7sat |
| Red Hat ceph storage 1.3 | rubygem-rack-protection | 0:1.5.0-7.el7sat |
| Red Hat ceph storage 1.3 | rubygem-rake | 0:0.9.2.2-41.el7sat |
| Red Hat ceph storage 1.3 | rubygem-rest-client | 0:1.6.7-1.el7sat |
| Red Hat ceph storage 1.3 | rubygem-rkerberos | 0:0.1.2-3.el7sat |
| Red Hat ceph storage 1.3 | rubygem-rkerberos-debuginfo | 0:0.1.2-3.el7sat |
| Red Hat ceph storage 1.3 | rubygem-rubyipmi | 0:0.10.0-1.el7sat |
| Red Hat ceph storage 1.3 | rubygem-sinatra | 1:1.3.6-27.el7sat |
| Red Hat ceph storage 1.3 | rubygem-smart_proxy_discovery | 0:1.0.2.1-1.el7sat |
| Red Hat ceph storage 1.3 | rubygem-tilt | 0:1.3.3-18.el7sat |
| Red Hat ceph storage 1.3 | userspace-rcu | 0:0.7.9-2.el7rhgs |
| Red Hat ceph storage 1.3 | userspace-rcu-debuginfo | 0:0.7.9-2.el7rhgs |
| SUSE Enterprise Storage 1.0 | ceph | 0.80.11-8.1 |