CS
Product
Ceph Storage
45
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 14Medium 24Low 0
Watch
Add Ceph Storage to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1759 | 6.8 | Apr 13 | A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the… Affected: 4.0 |
| CVE-2026-39979 | 6.5 | Apr 13 | jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers Affected: 4.0 |
| CVE-2023-0056 | 6.5 | Mar 23 | An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service Affected: 5.0 |
| CVE-2022-3854 | 6.5 | Mar 6 | A flaw was found in Ceph, relating to the URL processing on RGW backends Affected: 3.0; 4.0; 5.0 |
| CVE-2021-3979 | 6.5 | Aug 25 | A key length flaw was found in Red Hat Ceph Storage Affected: 3.0; 4.3; 5.1; 4.0; 5.0; 4.0; +1 more |
| CVE-2021-3524 | 6.5 | May 17 | A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21 Affected: 4.0 |
| CVE-2020-10753 | 6.5 | Jun 26 | A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) Affected: 3.0; 4.0 |
| CVE-2019-14864 | 6.5 | Jan 2 | Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag no_log set it to True when Sumologic and Splunk… Affected: 3.0 |
| CVE-2019-19337 | 6.5 | Dec 23 | A flaw was found in Red Hat Ceph Storage version 3 in the way the Ceph RADOS Gateway daemon handles S3 requests Affected: 3.3 |
| CVE-2018-16846 | 6.5 | Jan 15 | It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices Affected: 2.0; 3.0 |
| CVE-2018-19039 | 6.5 | Dec 13 | Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions Affected: 3.0 |
| CVE-2018-1129 | 6.5 | Jul 10 | A flaw was found in the way signature calculation was handled by cephx authentication protocol Affected: 1.3; 3 |
| CVE-2021-3509 | 6.1 | May 27 | A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component Affected: 4.0 |
| CVE-2020-25626 | 6.1 | Sep 30 | A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2 Affected: 2.0 |
| CVE-2020-1760 | 6.1 | Apr 23 | A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3 Affected: 3.0; 4.0 |
| CVE-2018-1059 | 6.1 | Apr 24 | The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host… Affected: 3.0 |
| CVE-2023-48795 | 5.9 | Dec 18 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some… Affected: 6.0 |
| CVE-2018-14662 | 5.7 | Jan 15 | It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption Affected: 2.0; 3.0 |
| CVE-2019-14905 | 5.6 | Mar 31 | A vulnerability was found in Ansible Engine versions 2.9.x before 2.9.3, 2.8.x before 2.8.8, 2.7.x before 2.7.16 and earlier, where in Ansible's nxos_file_copy module can be used… Affected: 3.0 |
| CVE-2020-25677 | 5.5 | Dec 8 | A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions Affected: 3.0; 4.0 |
| CVE-2020-10685 | 5.5 | May 11 | A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and… Affected: 2.0; 3.0 |
| CVE-2020-12458 | 5.5 | Apr 29 | An information-disclosure flaw was found in Grafana through 6.7.3 Affected: 3.0; 4.0 |
| CVE-2021-3531 | 5.3 | May 18 | A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21 Affected: 4.0 |
| CVE-2020-25678 | 4.4 | Jan 8 | A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text Affected: 4.0 |
Showing 24