Known vulnerabilities in Red Hat Ceph Storage - page 2

Vendor: Red Hat Inc.
Software: Red Hat Ceph Storage
Software CPE: cpe:2.3:a:red_hat:red_hat_ceph_storage:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 205
Public exploits: 11
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Ceph Storage Red Hat Ceph Storage is affected by 205 known vulnerabilities: 27 high, 112 medium, 66 low Critical High Medium Low

Vulnerabilities (205)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114088 - Stack-based buffer overflow
CVE-2025-5222		 CWE-121 High
No
No
 7.1 14.08.2025 SB2025081454
SB2025081455
SB2025081456
and 34 more
#VU113533 - Use After Free
CVE-2025-7425		 CWE-416 High
No
No
 7.1 31.07.2025 SB2025073137
SB2025073144
SB2025073053
and 56 more
#VU113526 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-40909		 CWE-362 Low
No
No
 7.1 31.07.2025 SB2025073123
SB2025073125
SB2025073126
and 43 more
#VU113187 - Double Free
CVE-2025-8058		 CWE-415 High
No
No
 7.1 24.07.2025 SB2025072408
SB2025072511
SB2025072512
and 59 more
#VU113156 - Memory corruption
CVE-2025-6965		 CWE-119 Medium
No
No
 7.1 22.07.2025 SB2025072254
SB2025072807
SB2025072890
and 100 more
#VU111716 - Insufficiently Protected Credentials
CVE-2024-47081		 CWE-522 Medium
No
No
 7.1 21.06.2025 SB2025062111
SB2025062112
SB2025062113
and 95 more
#VU107489 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-53382		 CWE-94 Low
No
No
 7.1, 8.1 16.04.2025 SB2025041637
SB2025041638
SB2025043033
and 8 more
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-22871		 CWE-444 Medium
No
No
 7.1, 8.1 05.04.2025 SB2025040507
SB2025040508
SB2025040739
and 109 more
#VU105983 - Resource exhaustion
CVE-2025-30204		 CWE-400 Medium
No
No
 8.1, 9.0 24.03.2025 SB2025032475
SB2025032730
SB2025040333
and 97 more
#VU105461 - Resource exhaustion
CVE-2025-22868		 CWE-400 Medium
No
No
 7.1, 8.1 10.03.2025 SB2025031013
SB2025031015
SB2025031076
and 89 more
#VU104044 - Resource exhaustion
CVE-2024-12243		 CWE-400 Medium
No
No
 8.1 18.02.2025 SB2025021831
SB2025021832
SB2025021835
and 65 more
#VU103980 - Resource exhaustion
CVE-2024-12133		 CWE-400 Medium
No
No
 8.1 14.02.2025 SB2025021428
SB2025021429
SB2025021430
and 78 more
#VU103771 - Improper Authentication
CVE-2024-12797		 CWE-287 Medium
No
No
 8.1 11.02.2025 SB2025021187
SB20250211108
SB20250211159
and 60 more
#VU103458 - Improper input validation
CVE-2025-22865		 CWE-20 Medium
No
No
 7.1, 8.1 30.01.2025 SB2025013039
SB2025013045
SB2025072441
and 2 more
#VU101681 - Predictable Seed in Pseudo-Random Number Generator (PRNG)
CVE-2024-52616		 CWE-337 Medium
No
No
 8.1 11.12.2024 SB2024121181
SB2024121182
SB2024121183
and 9 more
#VU90156 - Security Features
CVE-2024-35195		 CWE-254 Low
No
No
 8.1 31.05.2024 SB2024053174
SB2024053188
SB2024053192
and 117 more
#VU71261 - Improper input validation
CVE-2022-1941		 CWE-20 Medium
No
No
 8.1 17.01.2023 SB2023011780
SB2023011801
SB2023011802
and 24 more
#VU64274 - Out-of-bounds read
CVE-2022-29458		 CWE-125 Medium
No
No
 7.1 14.06.2022 SB2022061418
SB2022061419
SB2022072842
and 29 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 8.1 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU19178 - Out-of-bounds write
CVE-2019-12900		 CWE-787 High
No
No
 8.1 15.07.2019 SB2019071503
SB2019072101
SB2019080907
and 85 more


Showing elements 21 - 40 out of 205