Search for packages
| purl | pkg:deb/debian/ceph@14.2.21-1 |
| Next non-vulnerable version | 18.2.8+ds-1 |
| Latest non-vulnerable version | 18.2.8+ds-1 |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-18bk-met9-qfc9
Aliases: CVE-2024-31884 |
pybind: Improper use of Pybind |
Affected by 3 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-1yz5-m9s7-nqdm
Aliases: CVE-2024-47866 |
rgw: RGW DoS attack with empty HTTP header in S3 object copy |
Affected by 3 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-47cr-h639-tqd4
Aliases: CVE-2023-43040 |
rgw: improperly verified POST keys |
Affected by 3 other vulnerabilities. |
|
VCID-54nw-yq6d-2ueu
Aliases: CVE-2022-3650 |
A vulnerability has been found in Ceph which can lead to root privilege escalation. |
Affected by 3 other vulnerabilities. |
|
VCID-5bgn-2pbq-6yd1
Aliases: CVE-2022-0670 |
ceph: user/tenant can obtain access (read/write) to any share |
Affected by 3 other vulnerabilities. |
|
VCID-nczx-qfyh-xubz
Aliases: CVE-2021-3979 |
ceph: Ceph volume does not honour osd_dmcrypt_key_size |
Affected by 3 other vulnerabilities. |
|
VCID-r1ah-c6z7-vyen
Aliases: CVE-2025-52555 |
ceph: privilege escalation by unprivileged users in a ceph-fuse mounted CephFS |
Affected by 3 other vulnerabilities. Affected by 2 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-1fhp-86sm-bqe5 | Multiple vulnerabilities have been found in Ceph, the worst of which could result in privilege escalation. |
CVE-2020-25660
|
| VCID-36gd-352p-n7b7 | Multiple vulnerabilities have been found in Ceph, the worst of which could result in privilege escalation. |
CVE-2021-20288
|
| VCID-3pwt-4j1y-dbg6 | ceph: Unauthenticated clients can crash ceph RGW configured with beast as frontend |
CVE-2019-10222
|
| VCID-4mk7-e67u-zkgy | Multiple vulnerabilities have been found in Ceph, the worst of which could result in privilege escalation. |
CVE-2020-27781
|
| VCID-6kbn-psnc-q3cy | ceph: specially crafted XML payload on POST requests leads to DoS by crashing RGW |
CVE-2020-12059
|
| VCID-7k2s-fmzx-a3d8 | Multiple vulnerabilities have been found in Ceph, the worst of which could result in privilege escalation. |
CVE-2020-25678
|
| VCID-9e77-3unf-r3hu | ceph-dashboard: Cross-site scripting via token Cookie |
CVE-2021-3509
|
| VCID-a4u3-63ez-gfbc | Multiple vulnerabilities have been found in Ceph, the worst of which could result in privilege escalation. |
CVE-2020-10753
|
| VCID-gjne-rqt9-jqc5 | ceph: improper URL checking leads to information disclosure |
CVE-2020-1699
|
| VCID-kxvn-yjm8-3ygt | Multiple vulnerabilities have been found in Ceph, the worst of which could result in privilege escalation. |
CVE-2020-1760
|
| VCID-m5wq-1w2k-9khk | ceph-dashboard: Don't use Browser's LocalStorage for storing JWT but Secure Cookies with proper HTTP Headers |
CVE-2020-27839
|
| VCID-pp2v-1dp5-4bbd | ceph: connection leak in the RGW Beast front-end permits a DoS against the RGW server |
CVE-2020-1700
|
| VCID-qkp7-s947-ufcu | Multiple vulnerabilities have been found in Ceph, the worst of which could result in privilege escalation. |
CVE-2020-1759
|
| VCID-rukb-cwpx-q3hy | gateway: radosgw: CRLF injection |
CVE-2021-3524
|
| VCID-zbwp-sfx4-xke7 | ceph: RGW unauthenticated denial of service |
CVE-2021-3531
|