CVE-2024-47866: Red Hat Ceph

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument `x-amz-copy-source` to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.

Affected products

• Red Hat Ceph: up to and including 19.2.3

Published 2025-11-12. Last modified 2026-06-17.