Every CVE Search/ Get API key

CVE-2023-43040

IBM Spectrum Fusion HCI improper access control

6.5 MediumPublic exploitFix available

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
Low

Exploit likelihood

3.06%Up 3.0 points since May 13, 2024
90%50%10%1%

What each source reports

CVE List Score used 6.5

IBM Spectrum Fusion HCI improper access control

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.

Record
CVE-2023-43040
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L
Weakness
CWE-1220
Updated
2026-11-02
EUVDEUVD-2023-47461 6.5

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.

Record
EUVD-2023-47461
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L
Updated
2026-11-02
GitHub AdvisoriesGHSA-fwhj-j6cr-5qw4 6.5

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized...

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.

Record
GHSA-fwhj-j6cr-5qw4
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L
Weakness
CWE-1220
Updated
2026-11-02
NVD 6.5

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.

Record
CVE-2023-43040
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-1220
Updated
2026-11-02
OSV 9.8

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.

Record
CVE-2023-43040
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2023-43040 9.8

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.

Record
DEBIAN-CVE-2023-43040
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 6 moreShow less
OSVRHSA-2023:5693 6.3

Red Hat Security Advisory: Red Hat Ceph Storage 6.1 security, enhancement, and bug fix update

Record
RHSA-2023:5693
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2024:0745 6.3

Red Hat Security Advisory: Red Hat Ceph Storage 5.3 Security update

Record
RHSA-2024:0745
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2023-43040 6.5

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.

Record
UBUNTU-CVE-2023-43040
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-40646 No score

CVE-2023-43040 affecting package ceph for versions less than 16.2.10-4

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.

Record
AZL-40646
Updated
2026-11-02
OSVOESA-2023-1761 No score

ceph security update

Ceph is a massively scalable, open-source, distributed storage system that runs on commodity hardware and delivers object, block and file system storage.

Security Fix(es):

A flaw was found in rgw. This flaw allows an unprivileged user to write to any bucket(s) accessible by a given key if a POST's form-data contains a key called 'bucket' with a value matching the bucket's name used to sign the request. This issue results in a user being able to upload to any bucket accessible by the specified access key as long as the bucket in the POST policy matches the bucket in the said POST form part.(CVE-2023-43040)

Record
OESA-2023-1761
Updated
2026-11-02
OSVUSN-6613-1 No score

ceph vulnerability

Lucas Henry discovered that Ceph incorrectly handled specially crafted POST requests. An uprivileged user could use this to bypass Ceph's authorization checks and upload a file to any bucket.

Record
USN-6613-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ceph
Azure Linux:2
 before 16.2.10-4
16.2.10-4
ceph
Debian:12
 before 16.2.15+ds-0+deb12u1, plus listed versions
16.2.11+ds-216.2.11+ds-316.2.11+ds-416.2.11+ds-516.2.11+ds-5.1
16.2.15+ds-0+deb12u1
ceph
Debian:13
 before 16.2.11+ds-5
16.2.11+ds-5
ceph
Debian:14
 before 16.2.11+ds-5
16.2.11+ds-5
ceph
Debian:10
From an advisory covering 12 CVEs
 before 12.2.11+dfsg1-2.1+deb10u1, plus listed versions
12.2.11+dfsg1-2.1
12.2.11+dfsg1-2.1+deb10u1
ceph
Debian:11
From an advisory covering 4 CVEs
 before 14.2.21-1+deb11u1, plus listed versions
14.2.21-1
14.2.21-1+deb11u1
ceph
Debian:12
From an advisory covering 2 CVEs
 before 16.2.15+ds-0+deb12u1, plus listed versions
16.2.11+ds-216.2.11+ds-316.2.11+ds-416.2.11+ds-516.2.11+ds-5.1
16.2.15+ds-0+deb12u1
ceph
openEuler:20.03-LTS-SP1
 before 12.2.8-23.oe1
12.2.8-23.oe1
ceph
openEuler:20.03-LTS-SP3
 before 12.2.8-23.oe1
12.2.8-23.oe1
ceph
openEuler:22.03-LTS
 before 16.2.7-18.oe2203sp2
16.2.7-18.oe2203sp2
Show 192 moreShow less
Affected packages
PackageAffectedFixed
ceph
openEuler:22.03-LTS-SP1
 before 16.2.7-19.oe2203sp1
16.2.7-19.oe2203sp1
ceph
openEuler:22.03-LTS-SP2
 before 16.2.7-18.oe2203sp2
16.2.7-18.oe2203sp2
ceph
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
ceph-base
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
ceph-base-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
ceph-common
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
ceph-common-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
ceph-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
ceph-debugsource
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
ceph-exporter-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
ceph-fuse
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
ceph-fuse-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
ceph-immutable-object-cache
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
ceph-immutable-object-cache-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
ceph-mds-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
ceph-mgr-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
ceph-mib
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
ceph-mon-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
ceph-osd-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
ceph-radosgw-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
ceph-resource-agents
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
ceph-selinux
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
ceph-test-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
cephadm
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
cephadm-ansible
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 0:3.0.0-1.el9cp
0:3.0.0-1.el9cp
cephfs-mirror-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
cephfs-top
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
libcephfs-devel
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
libcephfs2
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
libcephfs2-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
libcephsqlite-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
librados-devel
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
librados-devel-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
librados2
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
librados2-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
libradospp-devel
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
libradosstriper1
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
libradosstriper1-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
librbd-devel
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
librbd1
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
librbd1-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
librgw-devel
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
librgw2
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
librgw2-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
python3-ceph-argparse
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
python3-ceph-common
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
python3-cephfs
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
python3-cephfs-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
python3-rados
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
python3-rados-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
python3-rbd
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
python3-rbd-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
python3-rgw
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
python3-rgw-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
rbd-fuse-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
rbd-mirror-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
rbd-nbd
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
rbd-nbd-debuginfo
Red Hat:ceph_storage:6.1::el9
From an advisory covering 5 CVEs
 before 2:17.2.6-148.el9cp
2:17.2.6-148.el9cp
ceph
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-base
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-base-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-common
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-common-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-debugsource
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-fuse-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-grafana-dashboards
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-immutable-object-cache-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-mds-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-mgr
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-mgr-cephadm
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-mgr-dashboard
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-mgr-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-mgr-diskprediction-local
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-mgr-k8sevents
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-mgr-modules-core
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-mgr-rook
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-mon
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-mon-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-osd-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-prometheus-alerts
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-radosgw-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-selinux
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-test
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-test-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
cephadm
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
cephfs-mirror-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
libcephfs-devel
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
libcephfs2
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
libcephfs2-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
libcephsqlite
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
libcephsqlite-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
librados-devel
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
librados-devel-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
librados2
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
librados2-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
libradospp-devel
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
libradosstriper1
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
libradosstriper1-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
librbd-devel
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
librbd1
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
librbd1-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
librgw-devel
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
librgw2
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
librgw2-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
python3-ceph-argparse
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
python3-ceph-common
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
python3-cephfs
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
python3-cephfs-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
python3-rados
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
python3-rados-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
python3-rbd
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
python3-rbd-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
python3-rgw
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
python3-rgw-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
rbd-fuse-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
rbd-mirror-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
rbd-nbd-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-osd
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-ansible
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 0:6.0.28.7-1.el8cp
0:6.0.28.7-1.el8cp
ceph-fuse
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-immutable-object-cache
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-mds
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-mib
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-radosgw
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph-resource-agents
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
cephfs-mirror
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
cephfs-top
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
haproxy
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 0:2.2.19-5.el8cp
0:2.2.19-5.el8cp
haproxy-debugsource
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 0:2.2.19-5.el8cp
0:2.2.19-5.el8cp
haproxy22
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 0:2.2.19-5.el8cp
0:2.2.19-5.el8cp
haproxy22-debuginfo
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 0:2.2.19-5.el8cp
0:2.2.19-5.el8cp
rbd-mirror
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
rbd-nbd
Red Hat:ceph_storage:5.3::el8
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el8cp
2:16.2.10-248.el8cp
ceph
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
ceph-base
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
ceph-base-debuginfo
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
ceph-common
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
ceph-common-debuginfo
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
ceph-debugsource
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
ceph-fuse
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
ceph-fuse-debuginfo
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
ceph-immutable-object-cache
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
ceph-immutable-object-cache-debuginfo
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
ceph-mds-debuginfo
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
ceph-mgr-debuginfo
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
ceph-mib
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
ceph-mon-debuginfo
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
ceph-osd-debuginfo
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
ceph-radosgw-debuginfo
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
ceph-resource-agents
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
ceph-selinux
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
ceph-test-debuginfo
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
cephadm
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
cephfs-mirror-debuginfo
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
cephfs-top
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
libcephfs-devel
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
libcephfs2
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
libcephfs2-debuginfo
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
libcephsqlite-debuginfo
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
librados-devel
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
librados-devel-debuginfo
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
librados2
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
librados2-debuginfo
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
libradospp-devel
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
libradosstriper1
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
libradosstriper1-debuginfo
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
librbd-devel
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
librbd1
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
librbd1-debuginfo
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
librgw-devel
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
librgw2
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
librgw2-debuginfo
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
python3-ceph-argparse
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
python3-ceph-common
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
python3-cephfs
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
python3-cephfs-debuginfo
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
python3-rados
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
python3-rados-debuginfo
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
python3-rbd
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
python3-rbd-debuginfo
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
python3-rgw
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
python3-rgw-debuginfo
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
rbd-fuse-debuginfo
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
rbd-mirror-debuginfo
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
rbd-nbd
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
rbd-nbd-debuginfo
Red Hat:ceph_storage:5.3::el9
From an advisory covering 2 CVEs
 before 2:16.2.10-248.el9cp
2:16.2.10-248.el9cp
ceph
Ubuntu:Pro:14.04:LTS
 before 0.80.11-0ubuntu1.14.04.4+esm2, plus listed versions
0.67.4-0ubuntu20.67.4-0ubuntu30.72-0ubuntu10.72.1-0ubuntu10.72.1-2
Show 18 moreShow less
0.72.1-30.72.2-10.72.2-20.78-0ubuntu10.79-0ubuntu10.80.1-0ubuntu10.80.1-0ubuntu1.10.80.5-0ubuntu0.14.04.10.80.7-0ubuntu0.14.04.10.80.9-0ubuntu0.14.04.10.80.9-0ubuntu0.14.04.20.80.10-0ubuntu0.14.04.10.80.10-0ubuntu1.14.04.20.80.10-0ubuntu1.14.04.30.80.11-0ubuntu1.14.04.10.80.11-0ubuntu1.14.04.20.80.11-0ubuntu1.14.04.30.80.11-0ubuntu1.14.04.4
0.80.11-0ubuntu1.14.04.4+esm2
ceph
Ubuntu:Pro:16.04:LTS
 before 10.2.11-0ubuntu0.16.04.3+esm1, plus listed versions
0.94.3-0ubuntu20.94.5-0ubuntu19.2.0-0ubuntu39.2.0-0ubuntu49.2.0-0ubuntu5
Show 19 moreShow less
9.2.0-0ubuntu610.0.2-0ubuntu110.0.3-0ubuntu110.0.5-0ubuntu110.1.0-0ubuntu110.1.1-0ubuntu110.1.2-0ubuntu110.2.0-0ubuntu0.16.04.110.2.0-0ubuntu0.16.04.210.2.2-0ubuntu0.16.04.210.2.3-0ubuntu0.16.04.210.2.5-0ubuntu0.16.04.110.2.6-0ubuntu0.16.04.110.2.7-0ubuntu0.16.04.110.2.9-0ubuntu0.16.04.110.2.10-0ubuntu0.16.04.110.2.11-0ubuntu0.16.04.110.2.11-0ubuntu0.16.04.210.2.11-0ubuntu0.16.04.3
10.2.11-0ubuntu0.16.04.3+esm1
ceph
Ubuntu:Pro:18.04:LTS
 before 12.2.13-0ubuntu0.18.04.11+esm1, plus listed versions
12.2.0-0ubuntu112.2.1-0ubuntu112.2.2-0ubuntu112.2.2-0ubuntu212.2.4-0ubuntu1
Show 20 moreShow less
12.2.4-0ubuntu1.112.2.7-0ubuntu0.18.04.112.2.8-0ubuntu0.18.04.112.2.8-0ubuntu0.18.04.212.2.11-0ubuntu0.18.04.112.2.11-0ubuntu0.18.04.212.2.12-0ubuntu0.18.04.112.2.12-0ubuntu0.18.04.212.2.12-0ubuntu0.18.04.312.2.12-0ubuntu0.18.04.412.2.12-0ubuntu0.18.04.512.2.13-0ubuntu0.18.04.212.2.13-0ubuntu0.18.04.312.2.13-0ubuntu0.18.04.412.2.13-0ubuntu0.18.04.512.2.13-0ubuntu0.18.04.612.2.13-0ubuntu0.18.04.712.2.13-0ubuntu0.18.04.812.2.13-0ubuntu0.18.04.1012.2.13-0ubuntu0.18.04.11
12.2.13-0ubuntu0.18.04.11+esm1
ceph
Ubuntu:20.04:LTS
 before 15.2.17-0ubuntu0.20.04.6, plus listed versions
14.2.2-0ubuntu314.2.2-0ubuntu414.2.4-0ubuntu114.2.4-0ubuntu214.2.4-0ubuntu3
Show 24 moreShow less
15.1.0-0ubuntu215.1.0-0ubuntu315.1.1-0ubuntu115.2.0-0ubuntu115.2.0-0ubuntu215.2.1-0ubuntu115.2.1-0ubuntu215.2.3-0ubuntu0.20.04.115.2.3-0ubuntu0.20.04.215.2.5-0ubuntu0.20.04.115.2.7-0ubuntu0.20.04.115.2.7-0ubuntu0.20.04.215.2.8-0ubuntu0.20.04.115.2.11-0ubuntu0.20.04.215.2.12-0ubuntu0.20.04.115.2.13-0ubuntu0.20.04.115.2.13-0ubuntu0.20.04.215.2.14-0ubuntu0.20.04.115.2.14-0ubuntu0.20.04.215.2.16-0ubuntu0.20.04.115.2.17-0ubuntu0.20.04.115.2.17-0ubuntu0.20.04.315.2.17-0ubuntu0.20.04.415.2.17-0ubuntu0.20.04.5
15.2.17-0ubuntu0.20.04.6
ceph
Ubuntu:22.04:LTS
 before 17.2.6-0ubuntu0.22.04.3, plus listed versions
16.2.6-0ubuntu116.2.6-0ubuntu216.2.6-0ubuntu316.2.7-0ubuntu116.2.7-0ubuntu4
Show 9 moreShow less
17.1.0-0ubuntu117.1.0-0ubuntu217.1.0-0ubuntu317.2.0-0ubuntu0.22.04.117.2.0-0ubuntu0.22.04.217.2.5-0ubuntu0.22.04.217.2.5-0ubuntu0.22.04.317.2.6-0ubuntu0.22.04.117.2.6-0ubuntu0.22.04.2
17.2.6-0ubuntu0.22.04.3
ceph
Ubuntu:24.04:LTS
 before 18.2.0-0ubuntu6, plus listed versions
18.2.0-0ubuntu3
18.2.0-0ubuntu6

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubriza/CVE-2023-430402024-07-29

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-43040 is a medium vulnerability (CVSS 6.5) in Ibm Spectrum Fusion Hci, published September 27, 2023. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.06%, the 87th percentile. Fixed in ceph 16.2.10-4.

References

Show 128 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open