Known vulnerabilities in ceph-iscsi (Red Hat package)

Vendor: Red Hat Inc.

Software: ceph-iscsi (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:ceph-iscsi_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 5

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Vulnerabilities (5)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU114318 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2021-3524	CWE-113	Low	No	No	3.4-5.el7cp, 3.4-5.el8cp, 3.5-2.el8cp	21.08.2025	SB2021051735 SB2025082110 SB2021051423 and 7 more
#VU73108 - Covert Timing Channel CVE-2020-25658	CWE-385	Low	No	No	3.4-5.el7cp, 3.4-5.el8cp	07.03.2023	SB2020111232 SB2023030749 SB2022111045 and 7 more
#VU66551 - Use of a Broken or Risky Cryptographic Algorithm CVE-2021-3979	CWE-327	Low	No	No	3.4-5.el7cp, 3.4-5.el8cp, 3.5-2.el8cp	16.08.2022	SB2022081730 SB2022081731 SB2022122122 and 6 more
#VU62463 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-24785	CWE-22	Medium	No	No	3.6-1.el8cp	20.04.2022	SB2022042016 SB2022042017 SB2022060317 and 65 more
#VU53311 - Improper input validation CVE-2021-3531	CWE-20	Medium	No	No	3.5-2.el8cp	17.05.2021	SB2021051713 SB2021051423 SB2021051424 and 4 more