Redhat Ceph Storage vulnerabilities

• jqlang jq, red hat ai inference server 3.2, ai inference server 3.3 +38 more +40 more jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers CVE-2026-39979 Fix available 6.9 MediumApril 13, 2026
• nodemailer, red hat advanced cluster management for kubernetes 2, ceph storage 8 +4 more +6 more Nodemailer: nodemailer: denial of service via crafted email address header CVE-2025-14874 Fix available 7.5 HighDecember 1, 2025
• gnome glib, red hat ceph storage 8, discovery 2 +58 more +60 more Glib: integer overflow in in g_escape_uri_string() CVE-2025-13601 Fix available 7.7 HighNovember 26, 2025
• 9bis kitty, apache sshd, sshj +68 more +70 more Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin CVE-2023-48795 Public exploitFix available EPSS 93.5% 5.9 MediumDecember 18, 2023
• eclipse jetty, ietf http, http/2 +166 more +168 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023
• ceph, redhat ceph storage +1 more A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit... CVE-2022-3854 Fix available 6.5 MediumMarch 6, 2023
• haproxy, fedoraproject extra packages for enterprise linux, fedora +6 more +8 more An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash... CVE-2023-0056 Fix available 6.5 MediumJanuary 18, 2023
• ceph, fedoraproject fedora, redhat ceph storage +2 more A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner... CVE-2022-0670 Fix available 9.1 CriticalJuly 25, 2022
• grafana, redhat ceph storage, storage +2 more An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix... CVE-2022-26148 Fix available EPSS 52.5% 9.8 CriticalMarch 21, 2022
• ceph, redhat ceph storage, fedoraproject fedora +5 more +7 more A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the... CVE-2021-3979 Fix available 6.5 MediumFebruary 19, 2022
• lapack project lapack, openblas project openblas, fedoraproject fedora +5 more +7 more An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in... CVE-2021-4048 Fix available 9.1 CriticalDecember 8, 2021
• microsoft zeromq, fedoraproject fedora, redhat ceph storage +1 more +3 more A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious... CVE-2021-20236 Fix available 9.8 CriticalMay 28, 2021
• redhat ceph storage A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020... CVE-2021-3509 Fix available 6.1 MediumMay 26, 2021
• ceph, redhat ceph storage, fedoraproject fedora +2 more A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a... CVE-2021-3531 Fix available 5.3 MediumMay 18, 2021
• ceph, redhat ceph storage, debian linux +1 more +3 more A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14... CVE-2021-3524 Fix available 6.5 MediumMay 17, 2021
• ceph, debian linux, fedoraproject fedora +1 more +3 more An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles... CVE-2021-20288 Fix available 7.2 HighApril 15, 2021
• ceph, fedoraproject fedora, redhat ceph storage +2 more A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in... CVE-2020-25678 Fix available 4.4 MediumJanuary 8, 2021
• ceph, fedoraproject fedora, redhat ceph storage +2 more +4 more User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila,... CVE-2020-27781 Fix available 7.1 HighDecember 18, 2020
• ceph ceph-ansible, redhat ceph storage +1 more Ceph-ansible 4.0.34.1 creates /etc/ceph/iscsi-gateway.conf with insecure default permissions,... CVE-2020-25677 5.5 MediumDecember 8, 2020
• ceph, fedoraproject fedora, redhat ceph storage +1 more +3 more A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2... CVE-2020-25660 Fix available 8.8 HighNovember 20, 2020
• encode django rest framework, debian linux, redhat ceph storage +2 more Cross-site Scripting (XSS) in Django REST Framework CVE-2020-25626 Fix available 6.1 MediumSeptember 30, 2020
• red hat ansible, redhat ansible engine, debian linux +3 more +5 more Improper Verification of Cryptographic Signature in ansible CVE-2020-14365 Fix available 7.1 HighSeptember 5, 2020
• linuxfoundation ceph, red hat ceph storage, canonical ubuntu linux +3 more +5 more A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is... CVE-2020-10753 Fix available 5.4 MediumJune 25, 2020
• red hat ansible, redhat ansible engine, ansible tower +4 more +6 more Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible CVE-2020-10685 Fix available 5.0 MediumMay 11, 2020
• grafana, fedoraproject fedora, redhat ceph storage +1 more +3 more Grafana information disclosure CVE-2020-12458 Fix available 5.5 MediumApril 29, 2020
• [unknown] ceph, canonical ubuntu linux, debian linux +3 more +5 more A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user... CVE-2020-1760 Fix available 5.8 MediumApril 6, 2020
• ceph, redhat ceph storage, openshift +2 more +4 more A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2... CVE-2020-1759 Fix available 6.4 MediumApril 6, 2020
• [unknown] systemd, debian linux, redhat ceph storage +7 more +9 more A heap use-after-free vulnerability was found in systemd before version v245-rc1, where... CVE-2020-1712 Public exploitFix available 7.8 HighFebruary 5, 2020
• ceph, redhat ceph storage +1 more A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5,... CVE-2020-1699 Fix available 7.5 HighJanuary 31, 2020
• red hat ansible, redhat ansible engine, fedoraproject fedora +6 more +8 more Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible CVE-2019-14905 Fix available 7.3 HighJanuary 28, 2020
• red hat ceph storage A flaw was found in Red Hat Ceph Storage version 3 in the way the Ceph RADOS Gateway daemon... CVE-2019-19337 Fix available 6.5 MediumDecember 23, 2019
• red hat ansible, debian linux, opensuse backports sle +5 more +7 more Inclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible CVE-2019-14864 Fix available 5.7 MediumDecember 6, 2019
• python-ecdsa project python-ecdsa, redhat ceph storage, openstack +1 more +3 more Improper Verification of Cryptographic Signature in Pure-Python ECDSA CVE-2019-14859 Fix available 7.4 HighOctober 14, 2019
• ceph, fedoraproject fedora, redhat ceph storage +2 more A flaw was found in the Ceph RGW configuration with Beast as the front end handling client... CVE-2019-10222 Fix available 7.5 HighAugust 28, 2019
• [unknown] ceph, canonical ubuntu linux, debian linux +3 more +5 more It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial... CVE-2018-16846 Fix available 6.5 MediumJanuary 15, 2019
• [unknown] ceph, canonical ubuntu linux, debian linux +3 more +5 more It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions... CVE-2018-14662 Fix available 3.5 LowJanuary 15, 2019
• grafana, netapp active iq performance analytics services, storagegrid webscale nas bridge +4 more +6 more Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary... CVE-2018-19039 Fix available 6.5 MediumDecember 13, 2018
• redhat ceph storage, [unknown] ceph-iscsi-cli, redhat enterprise linux desktop +2 more +4 more It was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using... CVE-2018-14649 Fix available EPSS 12.0% 9.8 CriticalOctober 9, 2018
• grafana, redhat ceph storage +1 more Grafana Authentication Bypass CVE-2018-15727 Public exploitFix available EPSS 63.1% 9.8 CriticalAugust 29, 2018
• [unknown] ansible, canonical ubuntu linux, debian linux +8 more +10 more Ansible Arbitrary Code Execution CVE-2018-10875 Fix available 7.8 HighJuly 13, 2018
• ceph, debian linux, opensuse leap +7 more +9 more A flaw was found in the way signature calculation was handled by cephx authentication protocol.... CVE-2018-1129 Fix available 6.5 MediumJuly 10, 2018
• ceph, debian linux, opensuse leap +7 more +9 more It was found that cephx authentication protocol did not verify ceph clients correctly and was... CVE-2018-1128 Fix available 7.5 HighJuly 10, 2018
• ceph, redhat ceph storage, debian linux +6 more +8 more A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having... CVE-2018-10861 Fix available 8.1 HighJuly 10, 2018
• [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +7 more +9 more The DPDK vhost-user interface does not check to verify that all the requested guest physical... CVE-2018-1059 Fix available 6.1 MediumApril 24, 2018
• ceph, redhat ceph storage, ceph storage mon +4 more +6 more A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the... CVE-2016-9579 Fix available 6.5 MediumDecember 12, 2016
• ceph project ceph, redhat ceph storage +1 more The RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows... CVE-2016-7031 Fix available 7.5 HighOctober 3, 2016
• redhat ceph, ceph storage mon, ceph storage osd +4 more +6 more The handle_command function in mon/Monitor.cc in Ceph allows remote authenticated users to cause... CVE-2016-5009 Fix available 6.5 MediumJuly 12, 2016