Every CVE Search/ Get API key

CVE-2024-47866

RGW DoS attack with empty HTTP header in S3 object copy

7.5 HighFix available

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.48%Up 0.4 points since Nov 13, 2025
90%50%10%1%

What each source reports

CVE List Score used 7.5

RGW DoS attack with empty HTTP header in S3 object copy

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.

Record
CVE-2024-47866
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-20
Updated
2026-11-02
EUVDEUVD-2024-55069 7.5

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.

Record
EUVD-2024-55069
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
NVD 7.5

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.

Record
CVE-2024-47866
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-20
Updated
2026-11-02
OSVALPINE-CVE-2024-47866 7.5

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.

Record
ALPINE-CVE-2024-47866
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSV 7.5

RGW DoS attack with empty HTTP header in S3 object copy

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.

Record
CVE-2024-47866
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-20
Updated
2026-11-02
OSVDEBIAN-CVE-2024-47866 7.5

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.

Record
DEBIAN-CVE-2024-47866
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 9 moreShow less
OSVOESA-2026-1541 7.5

ceph security update

Ceph is a massively scalable, open-source, distributed storage system that runs on commodity hardware and delivers object, block and file system storage.

Security Fix(es):

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.(CVE-2024-47866)

Record
OESA-2026-1541
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-1542 7.5

ceph security update

Ceph is a massively scalable, open-source, distributed storage system that runs on commodity hardware and delivers object, block and file system storage.

Security Fix(es):

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.(CVE-2024-47866)

Record
OESA-2026-1542
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:21068 7.5

Red Hat Security Advisory: Red Hat Ceph Storage 8.1 bug fix update

Record
RHSA-2025:21068
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:2769 7.5

Red Hat Security Advisory: Red Hat Ceph Storage 7.1 security and bug fix updates

Record
RHSA-2026:2769
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-47866 7.5

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.

Record
UBUNTU-CVE-2024-47866
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-70058 No score

CVE-2024-47866 affecting package ceph for versions less than 18.2.2-12

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.

Record
AZL-70058
Updated
2026-11-05
OSVAZL-70193 No score

CVE-2024-47866 affecting package ceph for versions less than 16.2.10-11

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.

Record
AZL-70193
Updated
2026-11-02
OSVBIT-ceph-2024-47866 No score

RGW DoS attack with empty HTTP header in S3 object copy

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.

Record
BIT-ceph-2024-47866
Updated
2026-11-02
OSVMGASA-2025-0333 No score

Updated ceph packages fix security vulnerability

RGW DoS attack with empty HTTP header in S3 object copy. (CVE-2024-47866)

Record
MGASA-2025-0333
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ceph19
Alpine:v3.24
 before 19.2.4-r0
19.2.4-r0
ceph
Azure Linux:3
 before 18.2.2-12
18.2.2-12
ceph
Azure Linux:2
 before 16.2.10-11
16.2.10-11
ceph
Bitnami
 before 20.2.1
20.2.1
ceph
Debian:12
 before 16.2.15+ds-0+deb12u2, plus listed versions
16.2.11+ds-216.2.11+ds-316.2.11+ds-416.2.11+ds-516.2.11+ds-5.116.2.15+ds-0+deb12u1
16.2.15+ds-0+deb12u2
ceph
Debian:13
 before 18.2.7+ds-1+deb13u1, plus listed versions
18.2.7+ds-1
18.2.7+ds-1+deb13u1
ceph
Debian:14
 before 18.2.7+ds-1.1, plus listed versions
18.2.7+ds-1
18.2.7+ds-1.1
ceph
Debian:11
From an advisory covering 2 CVEs
 before 14.2.21-1+deb11u2, plus listed versions
14.2.21-114.2.21-1+deb11u1
14.2.21-1+deb11u2
ceph
Mageia:9
 before 18.2.7-2.1.mga9
18.2.7-2.1.mga9
ceph
openEuler:24.03-LTS-SP3
 before 18.2.2-11.oe2403sp3
18.2.2-11.oe2403sp3
Show 177 moreShow less
Affected packages
PackageAffectedFixed
ceph
openEuler:22.03-LTS-SP4
 before 16.2.7-25.oe2203sp4
16.2.7-25.oe2203sp4
ceph
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
ceph-base
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
ceph-base-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
ceph-common
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
ceph-common-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
ceph-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
ceph-debugsource
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
ceph-exporter-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
ceph-fuse
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
ceph-fuse-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
ceph-immutable-object-cache
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
ceph-immutable-object-cache-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
ceph-mds-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
ceph-mgr-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
ceph-mib
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
ceph-mon-client-nvmeof-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
ceph-mon-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
ceph-osd-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
ceph-radosgw-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
ceph-resource-agents
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
ceph-selinux
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
ceph-test-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
cephadm
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
cephfs-mirror-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
cephfs-top
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
libcephfs-daemon-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
libcephfs-devel
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
libcephfs-proxy2
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
libcephfs-proxy2-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
libcephfs2
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
libcephfs2-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
libcephsqlite-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
librados-devel
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
librados-devel-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
librados2
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
librados2-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
libradospp-devel
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
libradosstriper1
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
libradosstriper1-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
librbd-devel
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
librbd1
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
librbd1-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
librgw-devel
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
librgw2
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
librgw2-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
python3-ceph-argparse
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
python3-ceph-common
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
python3-cephfs
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
python3-cephfs-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
python3-rados
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
python3-rados-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
python3-rbd
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
python3-rbd-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
python3-rgw
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
python3-rgw-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
rbd-fuse-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
rbd-mirror-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
rbd-nbd
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
rbd-nbd-debuginfo
Red Hat:ceph_storage:8.1::el9
From an advisory covering 2 CVEs
 before 2:19.2.1-292.el9cp
2:19.2.1-292.el9cp
ceph
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
ceph-base
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
ceph-base-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
ceph-common
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
ceph-common-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
ceph-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
ceph-debugsource
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
ceph-exporter-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
ceph-fuse
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
ceph-fuse-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
ceph-immutable-object-cache
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
ceph-immutable-object-cache-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
ceph-mds-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
ceph-mgr-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
ceph-mib
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
ceph-mon-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
ceph-osd-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
ceph-radosgw-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
ceph-resource-agents
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
ceph-selinux
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
ceph-test-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
cephfs-mirror-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
cephfs-top
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
libcephfs-devel
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
libcephfs2
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
libcephfs2-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
libcephsqlite-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
librados-devel
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
librados-devel-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
librados2
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
librados2-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
libradospp-devel
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
libradosstriper1
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
libradosstriper1-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
librbd-devel
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
librbd1
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
librbd1-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
librgw-devel
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
librgw2
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
librgw2-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
python3-ceph-argparse
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
python3-ceph-common
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
python3-cephfs
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
python3-cephfs-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
python3-rados
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
python3-rados-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
python3-rbd
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
python3-rbd-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
python3-rgw
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
python3-rgw-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
rbd-fuse-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
rbd-mirror-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
rbd-nbd
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
rbd-nbd-debuginfo
Red Hat:ceph_storage:7.1::el8
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el8cp
2:18.2.1-381.el8cp
ceph
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
ceph-base
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
ceph-base-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
ceph-common
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
ceph-common-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
ceph-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
ceph-debugsource
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
ceph-exporter-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
ceph-fuse
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
ceph-fuse-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
ceph-immutable-object-cache
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
ceph-immutable-object-cache-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
ceph-mds-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
ceph-mgr-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
ceph-mib
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
ceph-mon-client-nvmeof-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
ceph-mon-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
ceph-osd-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
ceph-radosgw-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
ceph-resource-agents
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
ceph-selinux
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
ceph-test-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
cephadm
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
cephfs-mirror-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
cephfs-top
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
libcephfs-devel
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
libcephfs2
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
libcephfs2-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
libcephsqlite-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
librados-devel
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
librados-devel-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
librados2
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
librados2-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
libradospp-devel
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
libradosstriper1
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
libradosstriper1-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
librbd-devel
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
librbd1
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
librbd1-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
librgw-devel
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
librgw2
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
librgw2-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
python3-ceph-argparse
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
python3-ceph-common
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
python3-cephfs
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
python3-cephfs-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
python3-rados
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
python3-rados-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
python3-rbd
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
python3-rbd-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
python3-rgw
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
python3-rgw-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
rbd-fuse-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
rbd-mirror-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
rbd-nbd
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
rbd-nbd-debuginfo
Red Hat:ceph_storage:7.1::el9
From an advisory covering 11 CVEs
 before 2:18.2.1-381.el9cp
2:18.2.1-381.el9cp
ceph
Ubuntu:Pro:14.04:LTS
 before 0.80.11-0ubuntu1.14.04.4+esm4, plus listed versions
0.67.4-0ubuntu20.67.4-0ubuntu30.72-0ubuntu10.72.1-0ubuntu10.72.1-2
Show 20 moreShow less
0.72.1-30.72.2-10.72.2-20.78-0ubuntu10.79-0ubuntu10.80.1-0ubuntu10.80.1-0ubuntu1.10.80.5-0ubuntu0.14.04.10.80.7-0ubuntu0.14.04.10.80.9-0ubuntu0.14.04.10.80.9-0ubuntu0.14.04.20.80.10-0ubuntu0.14.04.10.80.10-0ubuntu1.14.04.20.80.10-0ubuntu1.14.04.30.80.11-0ubuntu1.14.04.10.80.11-0ubuntu1.14.04.20.80.11-0ubuntu1.14.04.30.80.11-0ubuntu1.14.04.40.80.11-0ubuntu1.14.04.4+esm20.80.11-0ubuntu1.14.04.4+esm3
0.80.11-0ubuntu1.14.04.4+esm4
ceph
Ubuntu:Pro:16.04:LTS
 before 10.2.11-0ubuntu0.16.04.3+esm3, plus listed versions
0.94.3-0ubuntu20.94.5-0ubuntu19.2.0-0ubuntu39.2.0-0ubuntu49.2.0-0ubuntu5
Show 21 moreShow less
9.2.0-0ubuntu610.0.2-0ubuntu110.0.3-0ubuntu110.0.5-0ubuntu110.1.0-0ubuntu110.1.1-0ubuntu110.1.2-0ubuntu110.2.0-0ubuntu0.16.04.110.2.0-0ubuntu0.16.04.210.2.2-0ubuntu0.16.04.210.2.3-0ubuntu0.16.04.210.2.5-0ubuntu0.16.04.110.2.6-0ubuntu0.16.04.110.2.7-0ubuntu0.16.04.110.2.9-0ubuntu0.16.04.110.2.10-0ubuntu0.16.04.110.2.11-0ubuntu0.16.04.110.2.11-0ubuntu0.16.04.210.2.11-0ubuntu0.16.04.310.2.11-0ubuntu0.16.04.3+esm110.2.11-0ubuntu0.16.04.3+esm2
10.2.11-0ubuntu0.16.04.3+esm3
ceph
Ubuntu:Pro:18.04:LTS
 before 12.2.13-0ubuntu0.18.04.11+esm2, plus listed versions
12.2.0-0ubuntu112.2.1-0ubuntu112.2.2-0ubuntu112.2.2-0ubuntu212.2.4-0ubuntu1
Show 21 moreShow less
12.2.4-0ubuntu1.112.2.7-0ubuntu0.18.04.112.2.8-0ubuntu0.18.04.112.2.8-0ubuntu0.18.04.212.2.11-0ubuntu0.18.04.112.2.11-0ubuntu0.18.04.212.2.12-0ubuntu0.18.04.112.2.12-0ubuntu0.18.04.212.2.12-0ubuntu0.18.04.312.2.12-0ubuntu0.18.04.412.2.12-0ubuntu0.18.04.512.2.13-0ubuntu0.18.04.212.2.13-0ubuntu0.18.04.312.2.13-0ubuntu0.18.04.412.2.13-0ubuntu0.18.04.512.2.13-0ubuntu0.18.04.612.2.13-0ubuntu0.18.04.712.2.13-0ubuntu0.18.04.812.2.13-0ubuntu0.18.04.1012.2.13-0ubuntu0.18.04.1112.2.13-0ubuntu0.18.04.11+esm1
12.2.13-0ubuntu0.18.04.11+esm2
ceph
Ubuntu:Pro:20.04:LTS
 before 15.2.17-0ubuntu0.20.04.6+esm1, plus listed versions
14.2.2-0ubuntu314.2.2-0ubuntu414.2.4-0ubuntu114.2.4-0ubuntu214.2.4-0ubuntu3
Show 25 moreShow less
15.1.0-0ubuntu215.1.0-0ubuntu315.1.1-0ubuntu115.2.0-0ubuntu115.2.0-0ubuntu215.2.1-0ubuntu115.2.1-0ubuntu215.2.3-0ubuntu0.20.04.115.2.3-0ubuntu0.20.04.215.2.5-0ubuntu0.20.04.115.2.7-0ubuntu0.20.04.115.2.7-0ubuntu0.20.04.215.2.8-0ubuntu0.20.04.115.2.11-0ubuntu0.20.04.215.2.12-0ubuntu0.20.04.115.2.13-0ubuntu0.20.04.115.2.13-0ubuntu0.20.04.215.2.14-0ubuntu0.20.04.115.2.14-0ubuntu0.20.04.215.2.16-0ubuntu0.20.04.115.2.17-0ubuntu0.20.04.115.2.17-0ubuntu0.20.04.315.2.17-0ubuntu0.20.04.415.2.17-0ubuntu0.20.04.515.2.17-0ubuntu0.20.04.6
15.2.17-0ubuntu0.20.04.6+esm1
ceph
Ubuntu:22.04:LTS
 before 17.2.9-0ubuntu0.22.04.2, plus listed versions
16.2.6-0ubuntu116.2.6-0ubuntu216.2.6-0ubuntu316.2.7-0ubuntu116.2.7-0ubuntu4
Show 13 moreShow less
17.1.0-0ubuntu117.1.0-0ubuntu217.1.0-0ubuntu317.2.0-0ubuntu0.22.04.117.2.0-0ubuntu0.22.04.217.2.5-0ubuntu0.22.04.217.2.5-0ubuntu0.22.04.317.2.6-0ubuntu0.22.04.117.2.6-0ubuntu0.22.04.217.2.6-0ubuntu0.22.04.317.2.7-0ubuntu0.22.04.117.2.7-0ubuntu0.22.04.217.2.9-0ubuntu0.22.04.1
17.2.9-0ubuntu0.22.04.2
ceph
Ubuntu:24.04:LTS
 before 19.2.3-0ubuntu0.24.04.3, plus listed versions
18.2.0-0ubuntu318.2.0-0ubuntu618.2.0-0ubuntu719.2.0~git20240301.4c76c50-0ubuntu319.2.0~git20240301.4c76c50-0ubuntu4
Show 7 moreShow less
19.2.0~git20240301.4c76c50-0ubuntu619.2.0~git20240301.4c76c50-0ubuntu6.119.2.0-0ubuntu0.24.04.119.2.0-0ubuntu0.24.04.219.2.1-0ubuntu0.24.04.219.2.3-0ubuntu0.24.04.119.2.3-0ubuntu0.24.04.2
19.2.3-0ubuntu0.24.04.3
ceph
Ubuntu:25.10
 before 19.2.3-0ubuntu1.25.10.3, plus listed versions
19.2.1-0ubuntu119.2.1-0ubuntu319.2.3-0ubuntu1.25.10.119.2.3-0ubuntu1.25.10.2
19.2.3-0ubuntu1.25.10.3

History

History
RecordedChangedSources
affected
factsOSV
affected, aliases, referencesOSV
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-47866 is a high vulnerability (CVSS 7.5) in Ceph, published November 12, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.48%, the 41st percentile. Fixed in ceph19 19.2.4-r0.

References

Show 113 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open