{"id":"CVE-2024-47866","aliases":["ALPINE-CVE-2024-47866","AZL-70058","AZL-70193","BIT-ceph-2024-47866","DEBIAN-CVE-2024-47866","DLA-4460-1","EUVD-2024-55069","GHSA-mgrm-g92q-f8h8","MGASA-2025-0333","OESA-2026-1541","OESA-2026-1542","RHSA-2025:21068","RHSA-2026:2769","UBUNTU-CVE-2024-47866"],"status":"published","title":"RGW DoS attack with empty HTTP header in S3 object copy","description":"Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument `x-amz-copy-source` to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00479,"percentile":0.41643,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2025-11-12T10:28:50Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.24","package":"ceph19","fixed_in":["19.2.4-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"ceph","fixed_in":["18.2.2-12"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"ceph","fixed_in":["16.2.10-11"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"ceph","fixed_in":["20.2.1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"ceph","fixed_in":["16.2.15+ds-0+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ceph","fixed_in":["18.2.7+ds-1+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ceph","fixed_in":["18.2.7+ds-1.1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"ceph","fixed_in":["18.2.7-2.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"ceph","fixed_in":["18.2.2-11.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"ceph","fixed_in":["16.2.7-25.oe2203sp4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ceph","fixed_in":["0.80.11-0ubuntu1.14.04.4+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ceph","fixed_in":["10.2.11-0ubuntu0.16.04.3+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ceph","fixed_in":["12.2.13-0ubuntu0.18.04.11+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ceph","fixed_in":["15.2.17-0ubuntu0.20.04.6+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"ceph","fixed_in":["17.2.9-0ubuntu0.22.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"ceph","fixed_in":["19.2.3-0ubuntu0.24.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"ceph","fixed_in":["19.2.3-0ubuntu1.25.10.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.24","package":"ceph19","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.2.4-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2.2-12"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.10-11"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"ceph","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"20.2.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.15+ds-0+deb12u2"}]}],"versions":["16.2.11+ds-2","16.2.11+ds-3","16.2.11+ds-4","16.2.11+ds-5","16.2.11+ds-5.1","16.2.15+ds-0+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2.7+ds-1+deb13u1"}]}],"versions":["18.2.7+ds-1"]},{"source":"osv","ecosystem":"Debian:14","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2.7+ds-1.1"}]}],"versions":["18.2.7+ds-1"]},{"source":"osv","ecosystem":"Debian:11","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.21-1+deb11u2"}]}],"versions":["14.2.21-1","14.2.21-1+deb11u1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:9","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2.7-2.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2.2-11.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.7-25.oe2203sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-exporter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-immutable-object-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-immutable-object-cache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-mds-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-mgr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-mib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-mon-client-nvmeof-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-mon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-osd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-radosgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"ceph-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"cephadm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"cephfs-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"cephfs-top","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libcephfs-daemon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libcephfs-proxy2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libcephfs-proxy2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libcephfs2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libcephsqlite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librados-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librados2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"libradosstriper1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librbd1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"librgw2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-cephfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-rados-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"python3-rgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"rbd-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"rbd-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:8.1::el9","package":"rbd-nbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:19.2.1-292.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-exporter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-immutable-object-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-immutable-object-cache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-mds-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-mgr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-mib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-mon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-osd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-radosgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"ceph-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"cephfs-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"cephfs-top","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libcephfs2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libcephsqlite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librados-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librados2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"libradosstriper1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librbd1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"librgw2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-cephfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-rados-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"python3-rgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"rbd-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"rbd-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el8","package":"rbd-nbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el8cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-exporter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-immutable-object-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-immutable-object-cache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-mds-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-mgr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-mib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-mon-client-nvmeof-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-mon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-osd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-radosgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"ceph-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"cephadm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"cephfs-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"cephfs-top","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libcephfs2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libcephsqlite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librados-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librados2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"libradosstriper1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librbd1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"librgw2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-cephfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-rados-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"python3-rgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"rbd-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"rbd-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:ceph_storage:7.1::el9","package":"rbd-nbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:18.2.1-381.el9cp"}]}],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.80.11-0ubuntu1.14.04.4+esm4"}]}],"versions":["0.67.4-0ubuntu2","0.67.4-0ubuntu3","0.72-0ubuntu1","0.72.1-0ubuntu1","0.72.1-2","0.72.1-3","0.72.2-1","0.72.2-2","0.78-0ubuntu1","0.79-0ubuntu1","0.80.1-0ubuntu1","0.80.1-0ubuntu1.1","0.80.5-0ubuntu0.14.04.1","0.80.7-0ubuntu0.14.04.1","0.80.9-0ubuntu0.14.04.1","0.80.9-0ubuntu0.14.04.2","0.80.10-0ubuntu0.14.04.1","0.80.10-0ubuntu1.14.04.2","0.80.10-0ubuntu1.14.04.3","0.80.11-0ubuntu1.14.04.1","0.80.11-0ubuntu1.14.04.2","0.80.11-0ubuntu1.14.04.3","0.80.11-0ubuntu1.14.04.4","0.80.11-0ubuntu1.14.04.4+esm2","0.80.11-0ubuntu1.14.04.4+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.2.11-0ubuntu0.16.04.3+esm3"}]}],"versions":["0.94.3-0ubuntu2","0.94.5-0ubuntu1","9.2.0-0ubuntu3","9.2.0-0ubuntu4","9.2.0-0ubuntu5","9.2.0-0ubuntu6","10.0.2-0ubuntu1","10.0.3-0ubuntu1","10.0.5-0ubuntu1","10.1.0-0ubuntu1","10.1.1-0ubuntu1","10.1.2-0ubuntu1","10.2.0-0ubuntu0.16.04.1","10.2.0-0ubuntu0.16.04.2","10.2.2-0ubuntu0.16.04.2","10.2.3-0ubuntu0.16.04.2","10.2.5-0ubuntu0.16.04.1","10.2.6-0ubuntu0.16.04.1","10.2.7-0ubuntu0.16.04.1","10.2.9-0ubuntu0.16.04.1","10.2.10-0ubuntu0.16.04.1","10.2.11-0ubuntu0.16.04.1","10.2.11-0ubuntu0.16.04.2","10.2.11-0ubuntu0.16.04.3","10.2.11-0ubuntu0.16.04.3+esm1","10.2.11-0ubuntu0.16.04.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.13-0ubuntu0.18.04.11+esm2"}]}],"versions":["12.2.0-0ubuntu1","12.2.1-0ubuntu1","12.2.2-0ubuntu1","12.2.2-0ubuntu2","12.2.4-0ubuntu1","12.2.4-0ubuntu1.1","12.2.7-0ubuntu0.18.04.1","12.2.8-0ubuntu0.18.04.1","12.2.8-0ubuntu0.18.04.2","12.2.11-0ubuntu0.18.04.1","12.2.11-0ubuntu0.18.04.2","12.2.12-0ubuntu0.18.04.1","12.2.12-0ubuntu0.18.04.2","12.2.12-0ubuntu0.18.04.3","12.2.12-0ubuntu0.18.04.4","12.2.12-0ubuntu0.18.04.5","12.2.13-0ubuntu0.18.04.2","12.2.13-0ubuntu0.18.04.3","12.2.13-0ubuntu0.18.04.4","12.2.13-0ubuntu0.18.04.5","12.2.13-0ubuntu0.18.04.6","12.2.13-0ubuntu0.18.04.7","12.2.13-0ubuntu0.18.04.8","12.2.13-0ubuntu0.18.04.10","12.2.13-0ubuntu0.18.04.11","12.2.13-0ubuntu0.18.04.11+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2.17-0ubuntu0.20.04.6+esm1"}]}],"versions":["14.2.2-0ubuntu3","14.2.2-0ubuntu4","14.2.4-0ubuntu1","14.2.4-0ubuntu2","14.2.4-0ubuntu3","15.1.0-0ubuntu2","15.1.0-0ubuntu3","15.1.1-0ubuntu1","15.2.0-0ubuntu1","15.2.0-0ubuntu2","15.2.1-0ubuntu1","15.2.1-0ubuntu2","15.2.3-0ubuntu0.20.04.1","15.2.3-0ubuntu0.20.04.2","15.2.5-0ubuntu0.20.04.1","15.2.7-0ubuntu0.20.04.1","15.2.7-0ubuntu0.20.04.2","15.2.8-0ubuntu0.20.04.1","15.2.11-0ubuntu0.20.04.2","15.2.12-0ubuntu0.20.04.1","15.2.13-0ubuntu0.20.04.1","15.2.13-0ubuntu0.20.04.2","15.2.14-0ubuntu0.20.04.1","15.2.14-0ubuntu0.20.04.2","15.2.16-0ubuntu0.20.04.1","15.2.17-0ubuntu0.20.04.1","15.2.17-0ubuntu0.20.04.3","15.2.17-0ubuntu0.20.04.4","15.2.17-0ubuntu0.20.04.5","15.2.17-0ubuntu0.20.04.6"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.2.9-0ubuntu0.22.04.2"}]}],"versions":["16.2.6-0ubuntu1","16.2.6-0ubuntu2","16.2.6-0ubuntu3","16.2.7-0ubuntu1","16.2.7-0ubuntu4","17.1.0-0ubuntu1","17.1.0-0ubuntu2","17.1.0-0ubuntu3","17.2.0-0ubuntu0.22.04.1","17.2.0-0ubuntu0.22.04.2","17.2.5-0ubuntu0.22.04.2","17.2.5-0ubuntu0.22.04.3","17.2.6-0ubuntu0.22.04.1","17.2.6-0ubuntu0.22.04.2","17.2.6-0ubuntu0.22.04.3","17.2.7-0ubuntu0.22.04.1","17.2.7-0ubuntu0.22.04.2","17.2.9-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.2.3-0ubuntu0.24.04.3"}]}],"versions":["18.2.0-0ubuntu3","18.2.0-0ubuntu6","18.2.0-0ubuntu7","19.2.0~git20240301.4c76c50-0ubuntu3","19.2.0~git20240301.4c76c50-0ubuntu4","19.2.0~git20240301.4c76c50-0ubuntu6","19.2.0~git20240301.4c76c50-0ubuntu6.1","19.2.0-0ubuntu0.24.04.1","19.2.0-0ubuntu0.24.04.2","19.2.1-0ubuntu0.24.04.2","19.2.3-0ubuntu0.24.04.1","19.2.3-0ubuntu0.24.04.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"19.2.3-0ubuntu1.25.10.3"}]}],"versions":["19.2.1-0ubuntu1","19.2.1-0ubuntu3","19.2.3-0ubuntu1.25.10.1","19.2.3-0ubuntu1.25.10.2"]}],"products":[{"vendor":"ceph","product":"ceph"},{"vendor":"redhat","product":"ceph"}],"references":[{"url":"https://github.com/ceph/ceph/security/advisories/GHSA-mgrm-g92q-f8h8","tags":["x_refsource_CONFIRM","exploit","Exploit","Vendor Advisory","advisory","article","report"]},{"url":"http://www.openwall.com/lists/oss-security/2025/11/11/3","tags":["Mailing List","discussion","web","report"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-47866","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47866","tags":["web","advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47866.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-47866","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0333.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34741","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2025/11/11/3","tags":["web","report"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1541","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1542","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:21068","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2274457","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2336611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2355073","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357806","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2362830","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2386873","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2387009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2390042","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2390980","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2393479","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2394489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2397257","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2400637","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2404655","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2404669","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2405301","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21068.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-11831","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2312579","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-11831","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-11831","tags":["advisory"]},{"url":"https://github.com/yahoo/serialize-javascript/commit/f27d65d3de42affe2aac14607066c293891cec4e","tags":["article"]},{"url":"https://github.com/yahoo/serialize-javascript/pull/173","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-47866","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2392386","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-47866","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2026:2769","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944286","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2112230","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2272997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2273911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2323735","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2329426","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2345695","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2360974","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2372611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2374412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2389907","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2392861","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2404076","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2404656","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2404880","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2412237","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2412474","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2414844","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2414943","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2416314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2418462","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2428617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2432069","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2769.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-23358","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-23358","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23358","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-34749","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-34749","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-34749","tags":["advisory"]},{"url":"https://github.com/lepture/mistune/commit/a6d43215132fe4f3d93f8d7e90ba83b16a0838b2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-31884","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-31884","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-31884","tags":["advisory"]},{"url":"https://github.com/ceph/ceph/pull/66089","tags":["article"]},{"url":"https://github.com/ceph/ceph/pull/66140","tags":["article"]},{"url":"https://github.com/ceph/ceph/pull/66141","tags":["article"]},{"url":"https://github.com/ceph/ceph/pull/66142","tags":["article"]},{"url":"https://github.com/ceph/ceph/security/advisories/GHSA-xj9f-7g59-m4jx","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-51744","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-51744","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-51744","tags":["advisory"]},{"url":"https://github.com/golang-jwt/jwt/commit/7b1c1c00a171c6c79bbdb40e4ce7d197060c1c2c","tags":["article"]},{"url":"https://github.com/golang-jwt/jwt/security/advisories/GHSA-29wx-vh33-7x7r","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-55565","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2331063","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-55565","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-55565","tags":["advisory"]},{"url":"https://github.com/ai/nanoid/compare/3.3.7...3.3.8","tags":["article"]},{"url":"https://github.com/ai/nanoid/pull/510","tags":["article"]},{"url":"https://github.com/ai/nanoid/releases/tag/5.0.9","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-26791","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-26791","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-26791","tags":["advisory"]},{"url":"https://ensy.zip/posts/dompurify-323-bypass/","tags":["article"]},{"url":"https://github.com/cure53/DOMPurify/commit/d18ffcb554e0001748865da03ac75dd7829f0f02","tags":["article"]},{"url":"https://github.com/cure53/DOMPurify/releases/tag/3.2.4","tags":["article"]},{"url":"https://nsysean.github.io/posts/dompurify-323-bypass/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-47913","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-47913","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47913","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-hcg3-q754-cr77","tags":["advisory"]},{"url":"https://go.dev/cl/700295","tags":["article"]},{"url":"https://go.dev/issue/75178","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-4116","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-52555","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-52555","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-52555","tags":["advisory"]},{"url":"https://github.com/ceph/ceph/pull/60314","tags":["article"]},{"url":"https://github.com/ceph/ceph/security/advisories/GHSA-89hm-qq33-2fjm","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61729","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61729","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61729","tags":["advisory"]},{"url":"https://go.dev/cl/725920","tags":["article"]},{"url":"https://go.dev/issue/76445","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/8FJoBkPddm4","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-4155","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-47866","tags":["report"]},{"url":"https://github.com/ceph/ceph/pull/65159","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8045-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-47866","title":"RGW DoS attack with empty HTTP header in S3 object copy","description":"Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument `x-amz-copy-source` to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.","status":"published","published":"2025-11-12T18:28:18.545Z","modified":"2025-12-11T15:35:30.968Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:33:57.302325Z"}],"euvd":[{"id":"EUVD-2024-55069","description":"Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument `x-amz-copy-source` to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.","status":"published","published":"2025-11-12T18:28:18Z","modified":"2025-12-11T15:35:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:06.661228Z"}],"nvd":[{"id":"CVE-2024-47866","description":"Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument `x-amz-copy-source` to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.","status":"published","published":"2025-11-12T19:15:34.867Z","modified":"2026-11-08T20:10:00.187Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-20"],"updated_at":"2026-11-08T22:11:09.065293Z"}],"osv":[{"id":"ALPINE-CVE-2024-47866","description":"Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument `x-amz-copy-source` to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.","status":"published","published":"2025-11-12T19:15:34.867Z","modified":"2026-11-03T06:32:50.101506323Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:16:46.202932Z"},{"id":"CVE-2024-47866","title":"RGW DoS attack with empty HTTP header in S3 object copy","description":"Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument `x-amz-copy-source` to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.","status":"published","published":"2025-11-12T18:28:18.545Z","modified":"2026-11-10T02:30:46.96525508Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-11T11:06:30.165213Z"},{"id":"DEBIAN-CVE-2024-47866","description":"Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument `x-amz-copy-source` to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.","status":"published","published":"2025-11-12T19:15:34.867Z","modified":"2026-11-09T09:47:27.522354546Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-09T10:23:19.768736Z"},{"id":"OESA-2026-1541","title":"ceph security update","description":"Ceph is a massively scalable, open-source, distributed storage system that runs on commodity hardware and delivers object, block and file system storage.\r\n\r\nSecurity Fix(es):\n\nCeph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument `x-amz-copy-source` to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.(CVE-2024-47866)","status":"published","published":"2026-03-15T11:10:33Z","modified":"2026-08-18T01:19:36.692687988Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1542","title":"ceph security update","description":"Ceph is a massively scalable, open-source, distributed storage system that runs on commodity hardware and delivers object, block and file system storage.\r\n\r\nSecurity Fix(es):\n\nCeph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument `x-amz-copy-source` to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.(CVE-2024-47866)","status":"published","published":"2026-03-15T11:10:33Z","modified":"2026-08-18T01:19:36.961239252Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"RHSA-2025:21068","title":"Red Hat Security Advisory: Red Hat Ceph Storage 8.1 bug fix update","status":"published","published":"2025-11-12T10:28:50Z","modified":"2026-10-16T10:07:39Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2026:2769","title":"Red Hat Security Advisory: Red Hat Ceph Storage 7.1 security and bug fix updates","status":"published","published":"2026-04-04T10:05:14Z","modified":"2026-10-20T10:06:52Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"UBUNTU-CVE-2024-47866","description":"Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument `x-amz-copy-source` to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.","status":"published","published":"2025-11-12T19:15:00Z","modified":"2026-04-22T15:12:33.66889Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:06.818511Z"},{"id":"AZL-70058","title":"CVE-2024-47866 affecting package ceph for versions less than 18.2.2-12","description":"Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument `x-amz-copy-source` to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.","status":"published","published":"2025-11-12T19:15:34Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.144367Z"},{"id":"AZL-70193","title":"CVE-2024-47866 affecting package ceph for versions less than 16.2.10-11","description":"Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument `x-amz-copy-source` to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.","status":"published","published":"2025-11-12T19:15:34Z","modified":"2026-04-21T04:36:20.579746Z","updated_at":"2026-11-02T15:28:08.907584Z"},{"id":"BIT-ceph-2024-47866","title":"RGW DoS attack with empty HTTP header in S3 object copy","description":"Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument `x-amz-copy-source` to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.","status":"published","published":"2026-03-20T09:05:48.271Z","modified":"2026-09-08T08:45:51.629437422Z","updated_at":"2026-11-02T15:28:28.70813Z"},{"id":"DLA-4460-1","title":"ceph - security update","status":"published","published":"2026-02-01T00:00:00Z","modified":"2026-02-01T00:00:00Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2025-0333","title":"Updated ceph packages fix security vulnerability","description":"RGW DoS attack with empty HTTP header in S3 object copy.\n(CVE-2024-47866)\n","status":"published","published":"2025-12-29T20:41:12Z","modified":"2026-04-16T04:42:59.659752963Z","updated_at":"2026-11-02T15:49:43.178336Z"}]}}