Known vulnerabilities in ceph

Software: ceph
Software CPE: cpe:2.3:o:fedoraproject:ceph:*:*:*:*:*:fedora:*:*
Total vulnerabilities: 28
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ceph ceph is affected by 28 known vulnerabilities: 2 high, 13 medium, 13 low Critical High Medium Low

Vulnerabilities (28)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144582 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2025-30156
CWE-327 Medium
No
No
19.2.6-1.fc43, 20.2.4-1.fc44 21.08.2026 SB2026082177
SB2026082178
SB20260824292
#VU144399 - Improper Verification of Cryptographic Signature
CVE-2026-39944
CWE-347 Medium
No
No
19.2.6-1.fc43, 20.2.4-1.fc44 19.08.2026 SB20260819143
SB2026082177
SB2026082178
#VU144398 - Improper Authorization
CVE-2026-50152
CWE-285 Medium
No
No
19.2.6-1.fc43, 20.2.4-1.fc44 19.08.2026 SB20260819143
SB2026082177
SB2026082178
#VU144397 - Improper Verification of Cryptographic Signature
CVE-2026-54330
CWE-347 Medium
No
No
19.2.6-1.fc43, 20.2.4-1.fc44 19.08.2026 SB20260819143
SB2026082177
SB2026082178
#VU114318 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2021-3524
CWE-113 Low
No
No
14.2.21-1.fc32, 15.2.12-1.fc33, 16.2.4-1.fc34 21.08.2025 SB2021051735
SB2025082110
SB2021051423
and 7 more
#VU86858 - Type confusion
CVE-2024-1939
CWE-843 High
Available
No
18.2.1-10.fc40 27.02.2024 SB2024022772
SB2024022953
SB2024030138
and 7 more
#VU86857 - Type confusion
CVE-2024-1938
CWE-843 High
No
No
18.2.1-10.fc40 27.02.2024 SB2024022772
SB2024022953
SB2024030138
and 7 more
#VU72630 - Incorrect Default Permissions
CVE-2022-3650
CWE-276 Low
No
No
16.2.12-1.fc36 28.02.2023 SB2023022857
SB2023022873
SB2023030907
and 10 more
#VU66551 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2021-3979
CWE-327 Low
No
No
17.2.4-1.fc37, 17.2.5-1.fc37 16.08.2022 SB2022081730
SB2022081731
SB2022122122
and 6 more
#VU66440 - Permissions, Privileges, and Access Controls
CVE-2022-0670
CWE-264 Medium
No
No
16.2.10-1.fc35, 16.2.10-1.fc36 12.08.2022 SB2022081213
SB2022081215
SB2022081223
and 10 more
#VU53693 - Insufficiently Protected Credentials
CVE-2020-27781
CWE-522 Low
No
No
15.2.8-1.fc33 01.06.2021 SB2020121829
SB2021060110
SB2020122501
and 1 more
#VU53692 - Improper Authentication
CVE-2021-20288
CWE-287 Medium
No
No
14.2.20-1.fc32, 15.2.11-1.fc33, 16.2.1-1.fc34 01.06.2021 SB2021060109
SB2021060110
SB2022041926
and 5 more
#VU53311 - Improper input validation
CVE-2021-3531
CWE-20 Medium
No
No
14.2.21-1.fc32, 15.2.12-1.fc33, 16.2.4-1.fc34 17.05.2021 SB2021051713
SB2021051423
SB2021051424
and 4 more
#VU53310 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3509
CWE-79 Low
No
No
16.2.4-1.fc34 17.05.2021 SB2021051712
SB2021051423
SB2021060252
and 1 more
#VU48684 - Authentication Bypass Using an Alternate Path or Channel
CVE-2020-25660
CWE-288 Medium
No
No
15.2.6-1.fc33, 15.2.7-1.fc33 23.11.2020 SB2020112701
SB2020112704
SB2020120405
and 6 more
#VU31882 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1760
CWE-79 Medium
No
No
14.2.9-1.fc31 26.07.2020 SB2020042381
SB2020042382
SB2020041035
and 6 more
#VU48628 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2020-10753
CWE-74 Medium
No
No
14.2.10-1.fc32 26.06.2020 SB2020062624
SB2020112420
SB2020112704
and 7 more
#VU31992 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-1699
CWE-22 Medium
No
No
14.2.7-1.fc31, 14.2.7-2.fc31 21.04.2020 SB2020042143
SB2020020806
SB2020012942
and 2 more
#VU31809 - Use of Insufficiently Random Values
CVE-2020-1759
CWE-330 Medium
No
No
14.2.9-1.fc31 13.04.2020 SB2020041035
SB2020050107
SB2020112704
and 2 more
#VU20465 - Resource Management Errors
CVE-2019-10222
CWE-399 Medium
No
No
14.2.3-1.fc30, 14.2.3-1.fc31, 14.2.3-1.fc32 29.08.2019 SB2019082901
SB2019082902
SB2019082904
and 6 more


Showing elements 1 - 20 out of 28