Redhat Storage vulnerabilities

• jqlang jq, red hat ai inference server 3.2, ai inference server 3.3 +38 more +40 more jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers CVE-2026-39979 Fix available 6.9 MediumApril 13, 2026
• nodemailer, red hat advanced cluster management for kubernetes 2, ceph storage 8 +4 more +6 more Nodemailer: nodemailer: denial of service via crafted email address header CVE-2025-14874 Fix available 7.5 HighDecember 1, 2025
• gnome glib, red hat ceph storage 8, discovery 2 +58 more +60 more Glib: integer overflow in in g_escape_uri_string() CVE-2025-13601 Fix available 7.7 HighNovember 26, 2025
• 9bis kitty, apache sshd, sshj +68 more +70 more Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin CVE-2023-48795 Public exploitFix available EPSS 93.5% 5.9 MediumDecember 18, 2023
• samba, fedoraproject fedora, red hat enterprise linux 6 +12 more +14 more Samba: smbd allows client access to unix domain sockets on the file system as root CVE-2023-3961 Fix available 9.1 CriticalOctober 11, 2023
• samba, red hat enterprise linux 6, enterprise linux 7 +15 more +17 more Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc CVE-2023-42669 Fix available 6.5 MediumOctober 10, 2023
• samba, fedoraproject fedora, red hat enterprise linux 6 +12 more +14 more Samba: smb clients can truncate files with read-only permissions CVE-2023-4091 Fix available 6.5 MediumOctober 10, 2023
• samba, debian linux, fedoraproject fedora +10 more +12 more Samba: spotlight server-side share path disclosure CVE-2023-34968 Fix available 5.3 MediumJuly 19, 2023
• samba, fedoraproject fedora, red hat enterprise linux 6 +6 more +8 more Samba: smb2 packet signing is not enforced when "server signing = required" is set CVE-2023-3347 Fix available 5.9 MediumJuly 19, 2023
• eclipse jetty, ietf http, http/2 +166 more +168 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023
• ceph, redhat ceph storage +1 more A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit... CVE-2022-3854 Fix available 6.5 MediumMarch 6, 2023
• haproxy, fedoraproject extra packages for enterprise linux, fedora +6 more +8 more An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash... CVE-2023-0056 Fix available 6.5 MediumJanuary 18, 2023
• openstack keystone, [unknown] openstack-keystone, redhat openstack platform +2 more +4 more A flaw was found in OpenStack. The application credential tokens can be used even after they have... CVE-2022-2447 Fix available 6.6 MediumSeptember 1, 2022
• ceph, fedoraproject fedora, redhat ceph storage +2 more A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner... CVE-2022-0670 Fix available 9.1 CriticalJuly 25, 2022
• grafana, redhat ceph storage, storage +2 more An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix... CVE-2022-26148 Fix available EPSS 52.5% 9.8 CriticalMarch 21, 2022
• ceph, redhat ceph storage, fedoraproject fedora +5 more +7 more A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the... CVE-2021-3979 Fix available 6.5 MediumFebruary 19, 2022
• samba, canonical ubuntu linux, debian linux +20 more +22 more The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced... CVE-2021-44142 Public exploitFix available EPSS 73.6% 8.8 HighJanuary 31, 2022
• samba, fedoraproject fedora, redhat storage +2 more All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink... CVE-2021-44141 Fix available 4.3 MediumJanuary 31, 2022
• samba, fedoraproject fedora, redhat storage +2 more MaxQueryDuration not honoured in Samba AD DC LDAP CVE-2021-3670 Fix available 6.5 MediumDecember 31, 2021
• lapack project lapack, openblas project openblas, fedoraproject fedora +5 more +7 more An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in... CVE-2021-4048 Fix available 9.1 CriticalDecember 8, 2021
• samba, canonical ubuntu linux, debian linux +22 more +24 more A flaw was found in the way Samba maps domain users to local users. An authenticated attacker... CVE-2020-25717 Fix available 8.1 HighNovember 9, 2021
• samba, canonical ubuntu linux, debian linux +21 more +23 more A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this... CVE-2016-2124 Fix available 5.9 MediumNovember 9, 2021
• microsoft zeromq, fedoraproject fedora, redhat ceph storage +1 more +3 more A flaw was found in the ZeroMQ server in versions before 4.3.3. This flaw allows a malicious... CVE-2021-20236 Fix available 9.8 CriticalMay 28, 2021
• redhat ceph storage A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020... CVE-2021-3509 Fix available 6.1 MediumMay 26, 2021
• ceph, redhat ceph storage, fedoraproject fedora +2 more A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a... CVE-2021-3531 Fix available 5.3 MediumMay 18, 2021
• ceph, redhat ceph storage, debian linux +1 more +3 more A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14... CVE-2021-3524 Fix available 6.5 MediumMay 17, 2021
• ceph, debian linux, fedoraproject fedora +1 more +3 more An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles... CVE-2021-20288 Fix available 7.2 HighApril 15, 2021
• ceph, fedoraproject fedora, redhat ceph storage +2 more A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in... CVE-2020-25678 Fix available 4.4 MediumJanuary 8, 2021
• ceph, fedoraproject fedora, redhat ceph storage +2 more +4 more User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila,... CVE-2020-27781 Fix available 7.1 HighDecember 18, 2020
• ceph ceph-ansible, redhat ceph storage +1 more Ceph-ansible 4.0.34.1 creates /etc/ceph/iscsi-gateway.conf with insecure default permissions,... CVE-2020-25677 5.5 MediumDecember 8, 2020
• heketi project heketi, redhat enterprise linux, gluster storage +1 more +3 more Heketi logs sensitive information CVE-2020-10763 Fix available 5.5 MediumNovember 24, 2020
• ceph, fedoraproject fedora, redhat ceph storage +1 more +3 more A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2... CVE-2020-25660 Fix available 8.8 HighNovember 20, 2020
• samba, redhat enterprise linux, storage +2 more A flaw was found in the way samba handled file and directory permissions. An authenticated user... CVE-2020-14318 Fix available 4.3 MediumOctober 29, 2020
• encode django rest framework, debian linux, redhat ceph storage +2 more Cross-site Scripting (XSS) in Django REST Framework CVE-2020-25626 Fix available 6.1 MediumSeptember 30, 2020
• red hat ansible, redhat ansible engine, debian linux +3 more +5 more Improper Verification of Cryptographic Signature in ansible CVE-2020-14365 Fix available 7.1 HighSeptember 5, 2020
• debian linux, samba, fedoraproject fedora +2 more +4 more A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in... CVE-2020-10730 Fix available 6.5 MediumJuly 2, 2020
• linuxfoundation ceph, red hat ceph storage, canonical ubuntu linux +3 more +5 more A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is... CVE-2020-10753 Fix available 5.4 MediumJune 25, 2020
• red hat ansible, redhat ansible engine, ansible tower +4 more +6 more Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible CVE-2020-10685 Fix available 5.0 MediumMay 11, 2020
• grafana, fedoraproject fedora, redhat ceph storage +1 more +3 more Grafana information disclosure CVE-2020-12458 Fix available 5.5 MediumApril 29, 2020
• [unknown] ceph, canonical ubuntu linux, debian linux +3 more +5 more A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user... CVE-2020-1760 Fix available 5.8 MediumApril 6, 2020
• ceph, redhat ceph storage, openshift +2 more +4 more A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2... CVE-2020-1759 Fix available 6.4 MediumApril 6, 2020
• [unknown] systemd, debian linux, redhat ceph storage +7 more +9 more A heap use-after-free vulnerability was found in systemd before version v245-rc1, where... CVE-2020-1712 Public exploitFix available 7.8 HighFebruary 5, 2020
• ceph, redhat ceph storage +1 more A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5,... CVE-2020-1699 Fix available 7.5 HighJanuary 31, 2020
• [unknown] ceph, canonical ubuntu linux, opensuse leap +1 more +3 more A flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects. An... CVE-2020-1700 Fix available 6.5 MediumJanuary 31, 2020
• red hat ansible, redhat ansible engine, fedoraproject fedora +6 more +8 more Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible CVE-2019-14905 Fix available 7.3 HighJanuary 28, 2020
• red hat samba, canonical ubuntu linux, debian linux +7 more +9 more All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an... CVE-2019-14907 Fix available 6.5 MediumJanuary 21, 2020
• red hat ceph storage A flaw was found in Red Hat Ceph Storage version 3 in the way the Ceph RADOS Gateway daemon... CVE-2019-19337 Fix available 6.5 MediumDecember 23, 2019
• red hat ansible, debian linux, opensuse backports sle +5 more +7 more Inclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible CVE-2019-14864 Fix available 5.7 MediumDecember 6, 2019
• [unknown] vdsm, redhat enterprise virtualization, storage +1 more +3 more Insecure temporary file vulnerability in RedHat vsdm 4.9.6. CVE-2013-4280 5.5 MediumNovember 4, 2019
• python-ecdsa project python-ecdsa, redhat ceph storage, openstack +1 more +3 more Improper Verification of Cryptographic Signature in Pure-Python ECDSA CVE-2019-14859 Fix available 7.4 HighOctober 14, 2019
• Show olderLoading…