Red Hat Ceph Storage vulnerabilities

45 CVEs affecting Red Hat Ceph Storage, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-14874, published 2025-12-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-44487: HTTP/2 Rapid Reset Attack Vulnerability, published 2023-10-10. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2023-10-10. EPSS: 100% chance of exploitation in the next 30 days. The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2023-48795, published 2023-12-18. Medium severity, CVSS 5.9. EPSS: 93.5% chance of exploitation in the next 30 days. The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from…
CVE-2018-15727, published 2018-08-29. Critical severity, CVSS 9.8. EPSS: 64.3% chance of exploitation in the next 30 days. Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember me" cookie knowing only a username of an LDAP or OAuth user.
CVE-2022-26148, published 2022-03-21. Critical severity, CVSS 9.8. EPSS: 52.5% chance of exploitation in the next 30 days. An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix password can be found in the api_jsonrpc.php HTML source code. When the user logs in and allows the user to…
CVE-2018-14649, published 2018-10-09. Critical severity, CVSS 9.8. EPSS: 12% chance of exploitation in the next 30 days. It was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using python-werkzeug in debug shell mode. This is done by setting debug=True in file /usr/bin/rbd-target-api…
CVE-2018-19039, published 2018-12-13. Medium severity, CVSS 6.5. EPSS: 7.3% chance of exploitation in the next 30 days. Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions.
CVE-2019-10222, published 2019-11-08. High severity, CVSS 7.5. EPSS: 4.5% chance of exploitation in the next 30 days. A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph RGW server by sending valid HTTP headers and…
CVE-2016-9579, published 2018-08-01. High severity, CVSS 7.5. EPSS: 4.3% chance of exploitation in the next 30 days. A flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucket. A remote unauthenticated attacker could use this flaw…
CVE-2018-10861, published 2018-07-10. High severity, CVSS 8.1. EPSS: 3.2% chance of exploitation in the next 30 days. A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches…
CVE-2021-4048, published 2021-12-08. Critical severity, CVSS 9.1. EPSS: 2.8% chance of exploitation in the next 30 days. An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs…

Latest

CVE-2025-14874, published 2025-12-18. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A flaw was found in Nodemailer. This vulnerability allows a denial of service (DoS) via a crafted email address header that triggers infinite recursion in the address parser.
CVE-2025-13601, published 2025-11-26. High severity, CVSS 7.7. EPSS: 0.3% chance of exploitation in the next 30 days. A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of…
CVE-2023-0056, published 2023-03-23. Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days. An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote attacker to run a specially crafted…
CVE-2022-3854, published 2023-03-06. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by providing a null URL to crash the RGW, causing a denial of service.
CVE-2021-3979, published 2022-08-25. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker…
CVE-2022-0670, published 2022-07-25. Critical severity, CVSS 9.1. EPSS: 1.3% chance of exploitation in the next 30 days. A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the…