📦 Ceph Storage

by Redhat

🔍 What is Ceph Storage?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2022-0670

CRITICAL CVSS 9.1 Jul 25, 2022

This vulnerability in OpenStack Manila's Ceph filesystem integration allows a share owner to read or write any Manila share or the entire filesystem, compromising data confidentiality and integrity. I...

CVE-2022-26148

CRITICAL CVSS 9.8 Mar 21, 2022

This vulnerability exposes Zabbix account passwords in Grafana's HTML source code when integrated with Zabbix. Attackers can discover credentials by viewing page source, potentially compromising the Z...

CVE-2021-20236

CRITICAL CVSS 9.8 May 28, 2021

A stack buffer overflow vulnerability in ZeroMQ servers before version 4.3.3 allows malicious clients to execute arbitrary code or crash the server by sending crafted topic subscription requests follo...

CVE-2025-14874

HIGH CVSS 7.5 Dec 18, 2025

A denial-of-service vulnerability in Nodemailer allows attackers to crash email-sending applications by sending specially crafted email addresses that trigger infinite recursion in the address parser....

CVE-2025-13601

HIGH CVSS 7.7 Nov 26, 2025

A heap-based buffer overflow vulnerability in glib's g_escape_uri_string() function allows attackers to write beyond allocated memory boundaries when processing strings with many characters requiring ...

CVE-2023-44487

HIGH CVSS 7.5 Oct 10, 2023

CVE-2023-44487 is an HTTP/2 protocol vulnerability that allows attackers to cause denial of service by rapidly resetting streams, consuming server resources. This affects any system using HTTP/2, incl...

CVE-2021-20288

HIGH CVSS 7.2 Apr 15, 2021

This CVE-2021-20288 vulnerability in Ceph allows attackers to reuse authentication keys by exploiting improper sanitization of other_keys during CEPHX_GET_AUTH_SESSION_KEY requests. An attacker who ca...

CVE-2023-0056

MEDIUM CVSS 6.5 Mar 23, 2023

An uncontrolled resource consumption vulnerability in HAProxy could allow an authenticated remote attacker to crash the service by running a specially crafted malicious server in an OpenShift cluster....