{"id":"CVE-2023-43040","aliases":["AZL-40646","DEBIAN-CVE-2023-43040","DLA-3629-1","DLA-4310-1","DSA-5825-1","EUVD-2023-47461","GHSA-fwhj-j6cr-5qw4","OESA-2023-1761","RHSA-2023:5693","RHSA-2024:0745","UBUNTU-CVE-2023-43040","USN-6613-1"],"status":"published","title":"IBM Spectrum Fusion HCI improper access control","description":"IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access.  IBM X-Force ID:  266807.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.03063,"percentile":0.87722,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-1220"],"published":"2023-09-27T00:00:00Z","modified":"2026-10-26T18:03:06Z","exploits":[{"source":"pocgithub","id":"riza/CVE-2023-43040","title":"riza/CVE-2023-43040","date":"2024-07-29","url":"https://github.com/riza/CVE-2023-43040"}],"fixes":[{"ecosystem":"Azure Linux:2","package":"ceph","fixed_in":["16.2.10-4"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"ceph","fixed_in":["16.2.15+ds-0+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ceph","fixed_in":["16.2.11+ds-5"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ceph","fixed_in":["16.2.11+ds-5"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"ceph","fixed_in":["12.2.8-23.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"ceph","fixed_in":["12.2.8-23.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"ceph","fixed_in":["16.2.7-18.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"ceph","fixed_in":["16.2.7-19.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"ceph","fixed_in":["16.2.7-18.oe2203sp2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ceph","fixed_in":["0.80.11-0ubuntu1.14.04.4+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ceph","fixed_in":["10.2.11-0ubuntu0.16.04.3+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ceph","fixed_in":["12.2.13-0ubuntu0.18.04.11+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"ceph","fixed_in":["15.2.17-0ubuntu0.20.04.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"ceph","fixed_in":["17.2.6-0ubuntu0.22.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"ceph","fixed_in":["18.2.0-0ubuntu6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.10-4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.15+ds-0+deb12u1"}]}],"versions":["16.2.11+ds-2","16.2.11+ds-3","16.2.11+ds-4","16.2.11+ds-5","16.2.11+ds-5.1"]},{"source":"osv","ecosystem":"Debian:13","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.11+ds-5"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.11+ds-5"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.11+dfsg1-2.1+deb10u1"}]}],"versions":["12.2.11+dfsg1-2.1"],"bundled":12},{"source":"osv","ecosystem":"Debian:11","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.21-1+deb11u1"}]}],"versions":["14.2.21-1"],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.15+ds-0+deb12u1"}]}],"versions":["16.2.11+ds-2","16.2.11+ds-3","16.2.11+ds-4","16.2.11+ds-5","16.2.11+ds-5.1"],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.8-23.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.8-23.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.7-18.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.7-19.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.7-18.oe2203sp2"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-exporter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-immutable-object-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-immutable-object-cache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-mds-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-mgr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-mib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-mon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-osd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-radosgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"cephadm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"cephadm-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-1.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"cephfs-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"cephfs-top","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"libcephfs2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"libcephsqlite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"librados-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"librados2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"libradosstriper1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"librbd1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"librgw2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"python3-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"python3-ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"python3-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"python3-cephfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"python3-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"python3-rados-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"python3-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"python3-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"python3-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"python3-rgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"rbd-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"rbd-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"rbd-nbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-148.el9cp"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-grafana-dashboards","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-immutable-object-cache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-mds-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-mgr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-mgr-cephadm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-mgr-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-mgr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-mgr-diskprediction-local","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-mgr-k8sevents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-mgr-modules-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-mgr-rook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-mon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-mon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-osd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-prometheus-alerts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-radosgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"cephadm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"cephfs-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"libcephfs2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"libcephsqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"libcephsqlite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"librados-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"librados2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"libradosstriper1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"librbd1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"librgw2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"python3-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"python3-ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"python3-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"python3-cephfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"python3-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"python3-rados-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"python3-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"python3-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"python3-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"python3-rgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"rbd-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"rbd-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"rbd-nbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-osd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.28.7-1.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-immutable-object-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-mds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-mib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-radosgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"ceph-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"cephfs-mirror","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"cephfs-top","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.19-5.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"haproxy-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.19-5.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"haproxy22","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.19-5.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"haproxy22-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.19-5.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"rbd-mirror","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el8","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el8cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"ceph-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"ceph-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"ceph-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"ceph-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"ceph-immutable-object-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"ceph-immutable-object-cache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"ceph-mds-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"ceph-mgr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"ceph-mib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"ceph-mon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"ceph-osd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"ceph-radosgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"ceph-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"ceph-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"cephadm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"cephfs-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"cephfs-top","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"libcephfs2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"libcephsqlite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"librados-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"librados2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"libradosstriper1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"librbd1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"librgw2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"python3-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"python3-ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"python3-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"python3-cephfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"python3-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"python3-rados-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"python3-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"python3-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"python3-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"python3-rgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"rbd-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"rbd-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:5.3::el9","package":"rbd-nbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:16.2.10-248.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.80.11-0ubuntu1.14.04.4+esm2"}]}],"versions":["0.67.4-0ubuntu2","0.67.4-0ubuntu3","0.72-0ubuntu1","0.72.1-0ubuntu1","0.72.1-2","0.72.1-3","0.72.2-1","0.72.2-2","0.78-0ubuntu1","0.79-0ubuntu1","0.80.1-0ubuntu1","0.80.1-0ubuntu1.1","0.80.5-0ubuntu0.14.04.1","0.80.7-0ubuntu0.14.04.1","0.80.9-0ubuntu0.14.04.1","0.80.9-0ubuntu0.14.04.2","0.80.10-0ubuntu0.14.04.1","0.80.10-0ubuntu1.14.04.2","0.80.10-0ubuntu1.14.04.3","0.80.11-0ubuntu1.14.04.1","0.80.11-0ubuntu1.14.04.2","0.80.11-0ubuntu1.14.04.3","0.80.11-0ubuntu1.14.04.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2.11-0ubuntu0.16.04.3+esm1"}]}],"versions":["0.94.3-0ubuntu2","0.94.5-0ubuntu1","9.2.0-0ubuntu3","9.2.0-0ubuntu4","9.2.0-0ubuntu5","9.2.0-0ubuntu6","10.0.2-0ubuntu1","10.0.3-0ubuntu1","10.0.5-0ubuntu1","10.1.0-0ubuntu1","10.1.1-0ubuntu1","10.1.2-0ubuntu1","10.2.0-0ubuntu0.16.04.1","10.2.0-0ubuntu0.16.04.2","10.2.2-0ubuntu0.16.04.2","10.2.3-0ubuntu0.16.04.2","10.2.5-0ubuntu0.16.04.1","10.2.6-0ubuntu0.16.04.1","10.2.7-0ubuntu0.16.04.1","10.2.9-0ubuntu0.16.04.1","10.2.10-0ubuntu0.16.04.1","10.2.11-0ubuntu0.16.04.1","10.2.11-0ubuntu0.16.04.2","10.2.11-0ubuntu0.16.04.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.13-0ubuntu0.18.04.11+esm1"}]}],"versions":["12.2.0-0ubuntu1","12.2.1-0ubuntu1","12.2.2-0ubuntu1","12.2.2-0ubuntu2","12.2.4-0ubuntu1","12.2.4-0ubuntu1.1","12.2.7-0ubuntu0.18.04.1","12.2.8-0ubuntu0.18.04.1","12.2.8-0ubuntu0.18.04.2","12.2.11-0ubuntu0.18.04.1","12.2.11-0ubuntu0.18.04.2","12.2.12-0ubuntu0.18.04.1","12.2.12-0ubuntu0.18.04.2","12.2.12-0ubuntu0.18.04.3","12.2.12-0ubuntu0.18.04.4","12.2.12-0ubuntu0.18.04.5","12.2.13-0ubuntu0.18.04.2","12.2.13-0ubuntu0.18.04.3","12.2.13-0ubuntu0.18.04.4","12.2.13-0ubuntu0.18.04.5","12.2.13-0ubuntu0.18.04.6","12.2.13-0ubuntu0.18.04.7","12.2.13-0ubuntu0.18.04.8","12.2.13-0ubuntu0.18.04.10","12.2.13-0ubuntu0.18.04.11"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2.17-0ubuntu0.20.04.6"}]}],"versions":["14.2.2-0ubuntu3","14.2.2-0ubuntu4","14.2.4-0ubuntu1","14.2.4-0ubuntu2","14.2.4-0ubuntu3","15.1.0-0ubuntu2","15.1.0-0ubuntu3","15.1.1-0ubuntu1","15.2.0-0ubuntu1","15.2.0-0ubuntu2","15.2.1-0ubuntu1","15.2.1-0ubuntu2","15.2.3-0ubuntu0.20.04.1","15.2.3-0ubuntu0.20.04.2","15.2.5-0ubuntu0.20.04.1","15.2.7-0ubuntu0.20.04.1","15.2.7-0ubuntu0.20.04.2","15.2.8-0ubuntu0.20.04.1","15.2.11-0ubuntu0.20.04.2","15.2.12-0ubuntu0.20.04.1","15.2.13-0ubuntu0.20.04.1","15.2.13-0ubuntu0.20.04.2","15.2.14-0ubuntu0.20.04.1","15.2.14-0ubuntu0.20.04.2","15.2.16-0ubuntu0.20.04.1","15.2.17-0ubuntu0.20.04.1","15.2.17-0ubuntu0.20.04.3","15.2.17-0ubuntu0.20.04.4","15.2.17-0ubuntu0.20.04.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.2.6-0ubuntu0.22.04.3"}]}],"versions":["16.2.6-0ubuntu1","16.2.6-0ubuntu2","16.2.6-0ubuntu3","16.2.7-0ubuntu1","16.2.7-0ubuntu4","17.1.0-0ubuntu1","17.1.0-0ubuntu2","17.1.0-0ubuntu3","17.2.0-0ubuntu0.22.04.1","17.2.0-0ubuntu0.22.04.2","17.2.5-0ubuntu0.22.04.2","17.2.5-0ubuntu0.22.04.3","17.2.6-0ubuntu0.22.04.1","17.2.6-0ubuntu0.22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2.0-0ubuntu6"}]}],"versions":["18.2.0-0ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.80.11-0ubuntu1.14.04.4+esm2"}]}],"versions":["0.67.4-0ubuntu2","0.67.4-0ubuntu3","0.72-0ubuntu1","0.72.1-0ubuntu1","0.72.1-2","0.72.1-3","0.72.2-1","0.72.2-2","0.78-0ubuntu1","0.79-0ubuntu1","0.80.1-0ubuntu1","0.80.1-0ubuntu1.1","0.80.5-0ubuntu0.14.04.1","0.80.7-0ubuntu0.14.04.1","0.80.9-0ubuntu0.14.04.1","0.80.9-0ubuntu0.14.04.2","0.80.10-0ubuntu0.14.04.1","0.80.10-0ubuntu1.14.04.2","0.80.10-0ubuntu1.14.04.3","0.80.11-0ubuntu1.14.04.1","0.80.11-0ubuntu1.14.04.2","0.80.11-0ubuntu1.14.04.3","0.80.11-0ubuntu1.14.04.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2.11-0ubuntu0.16.04.3+esm1"}]}],"versions":["0.94.3-0ubuntu2","0.94.5-0ubuntu1","9.2.0-0ubuntu3","9.2.0-0ubuntu4","9.2.0-0ubuntu5","9.2.0-0ubuntu6","10.0.2-0ubuntu1","10.0.3-0ubuntu1","10.0.5-0ubuntu1","10.1.0-0ubuntu1","10.1.1-0ubuntu1","10.1.2-0ubuntu1","10.2.0-0ubuntu0.16.04.1","10.2.0-0ubuntu0.16.04.2","10.2.2-0ubuntu0.16.04.2","10.2.3-0ubuntu0.16.04.2","10.2.5-0ubuntu0.16.04.1","10.2.6-0ubuntu0.16.04.1","10.2.7-0ubuntu0.16.04.1","10.2.9-0ubuntu0.16.04.1","10.2.10-0ubuntu0.16.04.1","10.2.11-0ubuntu0.16.04.1","10.2.11-0ubuntu0.16.04.2","10.2.11-0ubuntu0.16.04.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.13-0ubuntu0.18.04.11+esm1"}]}],"versions":["12.2.0-0ubuntu1","12.2.1-0ubuntu1","12.2.2-0ubuntu1","12.2.2-0ubuntu2","12.2.4-0ubuntu1","12.2.4-0ubuntu1.1","12.2.7-0ubuntu0.18.04.1","12.2.8-0ubuntu0.18.04.1","12.2.8-0ubuntu0.18.04.2","12.2.11-0ubuntu0.18.04.1","12.2.11-0ubuntu0.18.04.2","12.2.12-0ubuntu0.18.04.1","12.2.12-0ubuntu0.18.04.2","12.2.12-0ubuntu0.18.04.3","12.2.12-0ubuntu0.18.04.4","12.2.12-0ubuntu0.18.04.5","12.2.13-0ubuntu0.18.04.2","12.2.13-0ubuntu0.18.04.3","12.2.13-0ubuntu0.18.04.4","12.2.13-0ubuntu0.18.04.5","12.2.13-0ubuntu0.18.04.6","12.2.13-0ubuntu0.18.04.7","12.2.13-0ubuntu0.18.04.8","12.2.13-0ubuntu0.18.04.10","12.2.13-0ubuntu0.18.04.11"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2.17-0ubuntu0.20.04.6"}]}],"versions":["14.2.2-0ubuntu3","14.2.2-0ubuntu4","14.2.4-0ubuntu1","14.2.4-0ubuntu2","14.2.4-0ubuntu3","15.1.0-0ubuntu2","15.1.0-0ubuntu3","15.1.1-0ubuntu1","15.2.0-0ubuntu1","15.2.0-0ubuntu2","15.2.1-0ubuntu1","15.2.1-0ubuntu2","15.2.3-0ubuntu0.20.04.1","15.2.3-0ubuntu0.20.04.2","15.2.5-0ubuntu0.20.04.1","15.2.7-0ubuntu0.20.04.1","15.2.7-0ubuntu0.20.04.2","15.2.8-0ubuntu0.20.04.1","15.2.11-0ubuntu0.20.04.2","15.2.12-0ubuntu0.20.04.1","15.2.13-0ubuntu0.20.04.1","15.2.13-0ubuntu0.20.04.2","15.2.14-0ubuntu0.20.04.1","15.2.14-0ubuntu0.20.04.2","15.2.16-0ubuntu0.20.04.1","15.2.17-0ubuntu0.20.04.1","15.2.17-0ubuntu0.20.04.3","15.2.17-0ubuntu0.20.04.4","15.2.17-0ubuntu0.20.04.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.2.6-0ubuntu0.22.04.3"}]}],"versions":["16.2.6-0ubuntu1","16.2.6-0ubuntu2","16.2.6-0ubuntu3","16.2.7-0ubuntu1","16.2.7-0ubuntu4","17.1.0-0ubuntu1","17.1.0-0ubuntu2","17.1.0-0ubuntu3","17.2.0-0ubuntu0.22.04.1","17.2.0-0ubuntu0.22.04.2","17.2.5-0ubuntu0.22.04.2","17.2.5-0ubuntu0.22.04.3","17.2.6-0ubuntu0.22.04.1","17.2.6-0ubuntu0.22.04.2"]}],"products":[{"vendor":"ibm","product":"spectrum fusion hci"},{"vendor":"ibm","product":"spectrum_fusion_hci"},{"vendor":"ibm","product":"storage_fusion_hci"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7151040","tags":["vendor-advisory","x_transferred","Vendor Advisory","advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/266807","tags":["vdb-entry","x_transferred","Vendor Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/09/msg00025.html","tags":["web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-43040","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-fwhj-j6cr-5qw4"},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-43040","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1761","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5693","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/6.1/html/release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601616","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1668082","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1668089","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1960643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2088172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2114615","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2138216","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2141003","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2161569","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166413","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166688","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172838","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2183926","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188557","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2203397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2210944","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2211290","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2211477","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2212787","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2214278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215392","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2216230","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2216855","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2216920","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2217817","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2219465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2220922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222720","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222726","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2223990","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224230","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224233","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224239","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224407","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2227045","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2227842","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2228004","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2228242","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2228357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2228875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2229179","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2229267","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2231068","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232087","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2233131","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2233762","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236188","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236385","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237376","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238174","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238623","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239697","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5693.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14041","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14041","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14041","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20676","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20676","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20676","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20677","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20677","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20677","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-43040","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-43040","tags":["advisory","report"]},{"url":"https://seclists.org/oss-sec/2023/q3/239","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-46159","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215374","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-46159","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46159","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0745","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153448","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2193419","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2211758","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215380","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2216857","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224636","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2227806","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2227810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2227997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2228001","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2228039","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2231469","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232164","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2233444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2233886","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2234610","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236190","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237391","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237880","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238665","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239149","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239433","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239455","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240089","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240144","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240586","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240727","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240839","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240977","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2244868","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245335","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245699","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2247232","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248825","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249014","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249017","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249565","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249571","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2251768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252781","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253672","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255035","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2259297","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0745.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-43040","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2023/09/26/10","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6613-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-43040","title":"IBM Spectrum Fusion HCI improper access control","description":"IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access.  IBM X-Force ID:  266807.","status":"published","published":"2024-05-13T02:18:30.967Z","modified":"2025-11-04T19:25:09.433Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-1220"],"updated_at":"2026-11-02T14:35:14.633899Z"}],"euvd":[{"id":"EUVD-2023-47461","description":"IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access.  IBM X-Force ID:  266807.","status":"published","published":"2024-05-13T02:18:30Z","modified":"2025-11-04T19:25:09Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","level":"medium"}],"updated_at":"2026-11-02T19:49:21.645169Z"}],"ghsa":[{"id":"GHSA-fwhj-j6cr-5qw4","title":"IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized...","description":"IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access.  IBM X-Force ID:  266807.","status":"published","published":"2024-05-14T15:32:50Z","modified":"2025-11-04T21:31:31Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","level":"medium"}],"cwes":["CWE-1220"],"updated_at":"2026-11-02T15:04:37.024156Z"}],"nvd":[{"id":"CVE-2023-43040","description":"IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access.  IBM X-Force ID:  266807.","status":"published","published":"2024-05-14T13:46:23.767Z","modified":"2026-06-17T06:25:00.777Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-1220"],"updated_at":"2026-11-02T14:09:15.329996Z"}],"osv":[{"id":"CVE-2023-43040","description":"IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access.  IBM X-Force ID:  266807.","status":"published","published":"2024-05-14T13:46:23.767Z","modified":"2026-03-15T22:47:26.968175Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:33.792101Z"},{"id":"DEBIAN-CVE-2023-43040","description":"IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access.  IBM X-Force ID:  266807.","status":"published","published":"2024-05-14T13:46:23.767Z","modified":"2026-10-26T18:03:06.80127208Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:40.275853Z"},{"id":"RHSA-2023:5693","title":"Red Hat Security Advisory: Red Hat Ceph Storage 6.1 security, enhancement, and bug fix update","status":"published","published":"2024-09-16T12:42:30Z","modified":"2026-10-16T10:02:38Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2024:0745","title":"Red Hat Security Advisory: Red Hat Ceph Storage 5.3 Security update","status":"published","published":"2024-09-16T12:42:42Z","modified":"2026-10-16T10:03:37Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"UBUNTU-CVE-2023-43040","description":"IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access.  IBM X-Force ID:  266807.","status":"published","published":"2023-09-27T00:00:00Z","modified":"2026-04-22T14:12:48.848314Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L","level":"medium"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"AZL-40646","title":"CVE-2023-43040 affecting package ceph for versions less than 16.2.10-4","description":"IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access.  IBM X-Force ID:  266807.","status":"published","published":"2024-05-14T13:46:23Z","modified":"2026-04-21T04:29:08.469782Z","updated_at":"2026-11-02T15:28:04.893995Z"},{"id":"DLA-3629-1","title":"ceph - security update","status":"published","published":"2023-10-23T00:00:00Z","modified":"2026-03-09T01:20:33.777283Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DLA-4310-1","title":"ceph - security update","status":"published","published":"2025-09-25T00:00:00Z","modified":"2025-09-25T22:16:47.259189Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5825-1","title":"ceph - security update","status":"published","published":"2024-12-06T00:00:00Z","modified":"2026-03-09T02:09:05.508389Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"OESA-2023-1761","title":"ceph security update","description":"Ceph is a massively scalable, open-source, distributed storage system that runs on commodity hardware and delivers object, block and file system storage.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in rgw. This flaw allows an unprivileged user to write to any bucket(s) accessible by a given key if a POST\u0026apos;s form-data contains a key called \u0026apos;bucket\u0026apos; with a value matching the bucket\u0026apos;s name used to sign the request. This issue results in a user being able to upload to any bucket accessible by the specified access key as long as the bucket in the POST policy matches the bucket in the said POST form part.(CVE-2023-43040)","status":"published","published":"2023-10-20T11:06:12Z","modified":"2026-08-06T11:06:12Z","updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"USN-6613-1","title":"ceph vulnerability","description":"Lucas Henry discovered that Ceph incorrectly handled specially\ncrafted POST requests. An uprivileged user could use this to \nbypass Ceph's authorization checks and upload a file to any bucket.\n","status":"published","published":"2024-01-29T18:08:52Z","modified":"2026-06-29T13:51:01.830315682Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}