MGASA-2023-0139

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2023-0139.html

Import Source

https://advisories.mageia.org/MGASA-2023-0139.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2023-0139

Related

CVE-2022-0670
CVE-2022-3650

Published

2023-04-15T19:03:44Z

Modified

2023-04-15T17:48:54Z

Summary

Updated ceph packages fix security vulnerability

Details

Openstack manilla owning a Ceph File system "share", enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. (CVE-2022-0670) Privilege escalation and privileged information disclosure (CVE-2022-3650)

References

https://advisories.mageia.org/MGASA-2023-0139.html
https://bugs.mageia.org/show_bug.cgi?id=30677
https://docs.ceph.com/en/latest/security/CVE-2022-0670/
https://github.com/ceph/ceph/pull/48713/commits

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

MGASA-2023-0139

Affected packages