CVE-2021-3531: Fedoraproject Fedora

Medium severity, CVSS 5.3. EPSS: 2.4% chance of exploitation in the next 30 days.

A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a GET Request for a swift URL that ends with two slashes it can cause the rgw to crash, resulting in a denial of service. The greatest threat to the system is of availability.

Affected products

• Fedoraproject Fedora: version 32 only; version 33 only; version 34 only
• Red Hat Ceph: before 14.2.21 (fixed in 14.2.21)
• Red Hat Ceph Storage: version 4.0 only

Published 2021-05-18. Last modified 2026-06-17.