CVE-2021-27358
Fixed in a distro release EPSS 83%
The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set.
Products: grafana, netapp e-series_performance_analyzer
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/grafana/grafana | 7.4.2 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | grafana | 7.5.9-4.el8 |
| Red Hat Enterprise Linux 8 | grafana | 0:7.5.9-4.el8 |
| Red Hat Enterprise Linux 8 | grafana-debuginfo | 0:7.5.9-4.el8 |
| Rocky Linux 8 | grafana | 0:7.5.9-4.el8 |
| SUSE HPE Helion OpenStack 8 | ardana-cobbler | 8.0+git.1614096566.e8c2b27-3.44.3 |
| SUSE HPE Helion OpenStack 8 | cassandra | 3.11.10-5.3.5 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-installation | 8.20210512-1.32.5 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-operations | 8.20210512-1.32.5 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-opsconsole | 8.20210512-1.32.5 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-planning | 8.20210512-1.32.5 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-security | 8.20210512-1.32.5 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-user | 8.20210512-1.32.5 |
| SUSE HPE Helion OpenStack 8 | grafana | 6.7.4-4.18.2 |
| SUSE HPE Helion OpenStack 8 | kibana | 4.6.6-3.9.2 |
| SUSE HPE Helion OpenStack 8 | openstack-heat-templates | 0.0.0+git.1623056900.7917e18-3.21.3 |
| SUSE HPE Helion OpenStack 8 | openstack-monasca-installer | 20190923_16.32-3.18.2 |
| SUSE HPE Helion OpenStack 8 | openstack-nova | 16.1.9~dev92-3.48.5 |
| SUSE HPE Helion OpenStack 8 | openstack-nova-doc | 16.1.9~dev92-3.48.5 |
| SUSE HPE Helion OpenStack 8 | python-Django | 1.11.29-3.25.3 |
| SUSE HPE Helion OpenStack 8 | python-elementpath | 1.3.1-1.3.2 |
| SUSE HPE Helion OpenStack 8 | python-eventlet | 0.20.0-6.3.3 |
| SUSE HPE Helion OpenStack 8 | python-py | 1.4.34-3.3.3 |
| SUSE HPE Helion OpenStack 8 | python-pysaml2 | 4.0.2-5.9.2 |
| SUSE HPE Helion OpenStack 8 | python-xmlschema | 1.0.18-1.3.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-aodh | 5.1.1~dev7-12.32.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-barbican | 5.0.2~dev3-12.33.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-ceilometer | 9.0.8~dev7-12.30.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-cinder | 11.2.3~dev29-14.34.2 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-designate | 5.0.3~dev7-12.31.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-freezer | 5.0.0.0~xrc2~dev2-10.28.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-glance | 15.0.3~dev3-12.31.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-heat | 9.0.8~dev22-12.33.2 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-horizon-hpe | 12.0.5~dev6-14.36.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-ironic | 9.1.8~dev8-12.33.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-keystone | 12.0.4~dev11-11.35.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-magnum | 5.0.2_5.0.2_5.0.2~dev31-11.32.2 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-manila | 5.1.1~dev5-12.37.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-monasca | 2.2.2~dev1-11.28.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-monasca-ceilometer | 1.5.1_1.5.1_1.5.1~dev3-8.28.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-murano | 4.0.2~dev2-12.28.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-neutron | 11.0.9~dev69-13.38.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-nova | 16.1.9~dev92-11.36.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-octavia | 1.0.6~dev3-12.33.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-sahara | 7.0.5~dev4-11.32.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-swift | 2.15.2_2.15.2_2.15.2~dev32-11.23.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-trove | 8.0.2~dev2-11.32.3 |
| SUSE Manager Client Tools 15 | grafana | 7.5.7-1.21.1 |
| SUSE OpenStack Cloud 7 | crowbar-openstack | 4.0+git.1616146720.44daffca0-9.81.2 |
| SUSE OpenStack Cloud 7 | grafana | 6.7.4-1.24.2 |
| SUSE OpenStack Cloud 7 | kibana | 4.6.6-9.2 |
| SUSE OpenStack Cloud 7 | monasca-installer | 20180608_12.47-16.2 |
| SUSE OpenStack Cloud 7 | python-Django | 1.8.19-3.29.1 |
| SUSE OpenStack Cloud 7 | python-py | 1.8.1-11.16.2 |
| SUSE OpenStack Cloud 7 | rubygem-activerecord-session_store | 0.1.2-3.4.2 |
| SUSE OpenStack Cloud 8 | ardana-cobbler | 8.0+git.1614096566.e8c2b27-3.44.3 |
| SUSE OpenStack Cloud 8 | cassandra | 3.11.10-5.3.5 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-installation | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-operations | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-opsconsole | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-planning | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-security | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-supplement | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-upstream-admin | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-upstream-user | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-user | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud 8 | grafana | 6.7.4-4.18.2 |
| SUSE OpenStack Cloud 8 | kibana | 4.6.6-3.9.2 |
| SUSE OpenStack Cloud 8 | openstack-heat-templates | 0.0.0+git.1623056900.7917e18-3.21.3 |
| SUSE OpenStack Cloud 8 | openstack-monasca-installer | 20190923_16.32-3.18.2 |
| SUSE OpenStack Cloud 8 | openstack-nova | 16.1.9~dev92-3.48.5 |
| SUSE OpenStack Cloud 8 | openstack-nova-doc | 16.1.9~dev92-3.48.5 |
| SUSE OpenStack Cloud 8 | python-Django | 1.11.29-3.25.3 |
| SUSE OpenStack Cloud 8 | python-elementpath | 1.3.1-1.3.2 |
| SUSE OpenStack Cloud 8 | python-eventlet | 0.20.0-6.3.3 |
| SUSE OpenStack Cloud 8 | python-py | 1.4.34-3.3.3 |
| SUSE OpenStack Cloud 8 | python-pysaml2 | 4.0.2-5.9.2 |
| SUSE OpenStack Cloud 8 | python-xmlschema | 1.0.18-1.3.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-aodh | 5.1.1~dev7-12.32.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-barbican | 5.0.2~dev3-12.33.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-ceilometer | 9.0.8~dev7-12.30.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-cinder | 11.2.3~dev29-14.34.2 |
| SUSE OpenStack Cloud 8 | venv-openstack-designate | 5.0.3~dev7-12.31.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-freezer | 5.0.0.0~xrc2~dev2-10.28.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-glance | 15.0.3~dev3-12.31.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-heat | 9.0.8~dev22-12.33.2 |
| SUSE OpenStack Cloud 8 | venv-openstack-horizon | 12.0.5~dev6-14.36.6 |
| SUSE OpenStack Cloud 8 | venv-openstack-ironic | 9.1.8~dev8-12.33.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-keystone | 12.0.4~dev11-11.35.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-magnum | 5.0.2_5.0.2_5.0.2~dev31-11.32.2 |
| SUSE OpenStack Cloud 8 | venv-openstack-manila | 5.1.1~dev5-12.37.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-monasca | 2.2.2~dev1-11.28.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-monasca-ceilometer | 1.5.1_1.5.1_1.5.1~dev3-8.28.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-murano | 4.0.2~dev2-12.28.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-neutron | 11.0.9~dev69-13.38.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-nova | 16.1.9~dev92-11.36.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-octavia | 1.0.6~dev3-12.33.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-sahara | 7.0.5~dev4-11.32.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-swift | 2.15.2_2.15.2_2.15.2~dev32-11.23.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-trove | 8.0.2~dev2-11.32.3 |
| SUSE OpenStack Cloud 9 | ardana-neutron | 9.0+git.1615223676.777f0b3-3.25.2 |
| SUSE OpenStack Cloud 9 | ardana-swift | 9.0+git.1618235096.90974ed-3.10.2 |
| SUSE OpenStack Cloud 9 | cassandra | 3.11.10-3.3.3 |
| SUSE OpenStack Cloud 9 | grafana | 6.7.4-3.23.2 |
| SUSE OpenStack Cloud 9 | kibana | 4.6.6-4.9.2 |
| SUSE OpenStack Cloud 9 | openstack-dashboard | 14.1.1~dev11-3.24.6 |
| SUSE OpenStack Cloud 9 | openstack-ironic | 11.1.5~dev17-3.25.5 |
| SUSE OpenStack Cloud 9 | openstack-neutron | 13.0.8~dev164-3.37.4 |
| SUSE OpenStack Cloud 9 | openstack-neutron-gbp | 12.0.1~dev29-3.25.3 |
| SUSE OpenStack Cloud 9 | openstack-nova | 18.3.1~dev82-3.37.6 |
| SUSE OpenStack Cloud 9 | python-Django1 | 1.11.29-3.25.1 |
| SUSE OpenStack Cloud 9 | python-elementpath | 1.3.1-1.3.2 |
| SUSE OpenStack Cloud 9 | python-py | 1.5.4-3.3.2 |
| SUSE OpenStack Cloud 9 | python-pysaml2 | 4.5.0-4.6.2 |
| SUSE OpenStack Cloud 9 | python-xmlschema | 1.0.18-1.3.2 |
| SUSE OpenStack Cloud 9 | venv-openstack-barbican | 7.0.1~dev24-3.23.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-cinder | 13.0.10~dev20-3.26.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-designate | 7.0.2~dev2-3.23.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-glance | 17.0.1~dev30-3.21.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-heat | 11.0.4~dev4-3.23.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-horizon | 14.1.1~dev11-4.27.3 |
| SUSE OpenStack Cloud 9 | venv-openstack-ironic | 11.1.5~dev17-4.21.2 |
| SUSE OpenStack Cloud 9 | venv-openstack-keystone | 14.2.1~dev4-3.24.3 |
| SUSE OpenStack Cloud 9 | venv-openstack-magnum | 7.2.1~dev1-4.23.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-manila | 7.4.2~dev60-3.29.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-monasca | 2.7.1~dev10-3.21.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-monasca-ceilometer | 1.8.2~dev3-3.23.2 |
| SUSE OpenStack Cloud 9 | venv-openstack-neutron | 13.0.8~dev164-6.27.3 |
| SUSE OpenStack Cloud 9 | venv-openstack-nova | 18.3.1~dev82-3.27.3 |
| SUSE OpenStack Cloud 9 | venv-openstack-octavia | 3.2.3~dev7-4.23.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-sahara | 9.0.2~dev15-3.23.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-swift | 2.19.2~dev48-2.18.1 |
| SUSE OpenStack Cloud Crowbar 8 | cassandra | 3.11.10-5.3.5 |
| SUSE OpenStack Cloud Crowbar 8 | crowbar-core | 5.0+git.1622489449.a8e60e238-3.50.4 |
| SUSE OpenStack Cloud Crowbar 8 | crowbar-openstack | 5.0+git.1616001417.67fd9c2a1-4.52.5 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-deployment | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-supplement | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-upstream-admin | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-upstream-user | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud Crowbar 8 | grafana | 6.7.4-4.18.2 |
| SUSE OpenStack Cloud Crowbar 8 | kibana | 4.6.6-3.9.2 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-heat-templates | 0.0.0+git.1623056900.7917e18-3.21.3 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-monasca-installer | 20190923_16.32-3.18.2 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-nova | 16.1.9~dev92-3.48.5 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-nova-doc | 16.1.9~dev92-3.48.5 |
| SUSE OpenStack Cloud Crowbar 8 | python-Django | 1.11.29-3.25.3 |
| SUSE OpenStack Cloud Crowbar 8 | python-elementpath | 1.3.1-1.3.2 |
| SUSE OpenStack Cloud Crowbar 8 | python-eventlet | 0.20.0-6.3.3 |
| SUSE OpenStack Cloud Crowbar 8 | python-py | 1.4.34-3.3.3 |
| SUSE OpenStack Cloud Crowbar 8 | python-pysaml2 | 4.0.2-5.9.2 |
| SUSE OpenStack Cloud Crowbar 8 | python-xmlschema | 1.0.18-1.3.3 |
| SUSE OpenStack Cloud Crowbar 8 | rubygem-activerecord-session_store | 0.1.2-3.3.2 |
| SUSE OpenStack Cloud Crowbar 9 | cassandra | 3.11.10-3.3.3 |
| SUSE OpenStack Cloud Crowbar 9 | crowbar-openstack | 6.0+git.1616146717.a89ae0f4e-3.34.4 |
| SUSE OpenStack Cloud Crowbar 9 | grafana | 6.7.4-3.23.2 |
| SUSE OpenStack Cloud Crowbar 9 | kibana | 4.6.6-4.9.2 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-dashboard | 14.1.1~dev11-3.24.6 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-ironic | 11.1.5~dev17-3.25.5 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-neutron | 13.0.8~dev164-3.37.4 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-neutron-gbp | 12.0.1~dev29-3.25.3 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-nova | 18.3.1~dev82-3.37.6 |
| SUSE OpenStack Cloud Crowbar 9 | python-Django1 | 1.11.29-3.25.1 |
| SUSE OpenStack Cloud Crowbar 9 | python-elementpath | 1.3.1-1.3.2 |
| SUSE OpenStack Cloud Crowbar 9 | python-py | 1.5.4-3.3.2 |
| SUSE OpenStack Cloud Crowbar 9 | python-pysaml2 | 4.5.0-4.6.2 |
| SUSE OpenStack Cloud Crowbar 9 | python-xmlschema | 1.0.18-1.3.2 |
| SUSE OpenStack Cloud Crowbar 9 | rubygem-activerecord-session_store | 0.1.2-4.3.2 |
| Ubuntu 16.04 LTS | grafana | no fix |
| openSUSE Leap 15.2 | grafana | 7.5.7-lp152.2.16.1 |
| openSUSE Leap 15.3 | grafana | 7.5.7-3.12.1 |