[UNKNOWN] ceph vulnerabilities

CVEs per yearBy the year they were published

1. 20181
2. 20193
3. 20203

Newest CVEs

• CVE-2020-10736

  An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict access,…

  [UNKNOWN] · ceph

  High8.0
• CVE-2020-1760

  A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw could lead to potential XSS attacks…

  [UNKNOWN] · ceph

  Medium5.8
• CVE-2020-1700

  A flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects. An authenticated attacker can abuse this flaw by making multiple…

  [UNKNOWN] · ceph

  Medium6.5
• CVE-2019-3821

  A flaw was found in the way civetweb frontend was handling requests for ceph RGW server with SSL enabled. An unauthenticated attacker could create multiple…

  [UNKNOWN] · ceph

  High7.5
• CVE-2018-14662

  It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk…

  [UNKNOWN] · ceph

  Low3.5
• CVE-2018-16846

  It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices.

  [UNKNOWN] · ceph

  Medium6.5
• CVE-2017-7519

  In Ceph, a format string flaw was found in the way libradosstriper parses input from user. A user could crash an application or service using the…

  [UNKNOWN] · ceph

  Low2.3