Known vulnerabilities in Red Hat Ceph Storage - page 2

Vendor: Red Hat Inc.
Software: Red Hat Ceph Storage
Software CPE: cpe:2.3:a:red_hat:red_hat_ceph_storage:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 205
Public exploits: 11
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Ceph Storage Red Hat Ceph Storage is affected by 205 known vulnerabilities: 27 high, 112 medium, 66 low Critical High Medium Low

Vulnerabilities (205)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114088 - Stack-based buffer overflow
CVE-2025-5222		 CWE-121 High
No
No
 7.1 14.08.2025 SB2025081454
SB2025081455
SB2025081456
and 34 more
#VU113533 - Use After Free
CVE-2025-7425		 CWE-416 High
No
No
 7.1 31.07.2025 SB2025073137
SB2025073144
SB2025073053
and 56 more
#VU113526 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-40909		 CWE-362 Low
No
No
 7.1 31.07.2025 SB2025073123
SB2025073125
SB2025073126
and 43 more
#VU113187 - Double Free
CVE-2025-8058		 CWE-415 High
No
No
 7.1 24.07.2025 SB2025072408
SB2025072511
SB2025072512
and 59 more
#VU113156 - Memory corruption
CVE-2025-6965		 CWE-119 Medium
No
No
 7.1 22.07.2025 SB2025072254
SB2025072807
SB2025072890
and 100 more
#VU112067 - Protection Mechanism Failure
CVE-2025-32462		 CWE-693 Low
Available
No
 7.1 01.07.2025 SB2025070109
SB2025070111
SB2025070112
and 42 more
#VU111716 - Insufficiently Protected Credentials
CVE-2024-47081		 CWE-522 Medium
No
No
 7.1 21.06.2025 SB2025062111
SB2025062112
SB2025062113
and 96 more
#VU111225 - Integer overflow
CVE-2025-6021		 CWE-190 High
No
No
 7.1 17.06.2025 SB2025061921
SB2025062408
SB2025062747
and 63 more
#VU111223 - Type confusion
CVE-2025-49796		 CWE-843 Medium
No
No
 7.1 17.06.2025 SB2025061728
SB2025070832
SB20250709112
and 85 more
#VU111221 - Use After Free
CVE-2025-49794		 CWE-416 Medium
No
No
 7.1 17.06.2025 SB2025061728
SB2025070832
SB20250709112
and 66 more
#VU109840 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-47273		 CWE-22 High
No
No
 7.1 27.05.2025 SB2025052721
SB2025052734
SB2025052736
and 112 more
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-22871		 CWE-444 Medium
No
No
 7.1, 8.1 05.04.2025 SB2025040507
SB2025040508
SB2025040739
and 109 more
#VU105900 - Memory corruption
CVE-2025-25724		 CWE-119 High
No
No
 7.1 20.03.2025 SB2025032034
SB2025032045
SB2025032169
and 25 more
#VU101868 - Resource exhaustion
CVE-2024-45338		 CWE-400 Medium
No
No
 7.1, 8.1 19.12.2024 SB2024121932
SB2024123101
SB2025010619
and 137 more
#VU86049 - Insufficient Verification of Data Authenticity
CVE-2024-24557		 CWE-345 Medium
No
No
 7.1, 8.1 02.02.2024 SB2024020242
SB2024032237
SB2024032712
and 18 more
#VU71398 - Insufficient Verification of Data Authenticity
CVE-2022-23491		 CWE-345 High
No
No
 8.1 20.01.2023 SB2023012034
SB2023012035
SB2023012036
and 51 more
#VU71261 - Improper input validation
CVE-2022-1941		 CWE-20 Medium
No
No
 8.1 17.01.2023 SB2023011780
SB2023011801
SB2023011802
and 24 more
#VU64274 - Out-of-bounds read
CVE-2022-29458		 CWE-125 Medium
No
No
 7.1 14.06.2022 SB2022061418
SB2022061419
SB2022072842
and 29 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 8.1 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU19178 - Out-of-bounds write
CVE-2019-12900		 CWE-787 High
No
No
 8.1 15.07.2019 SB2019071503
SB2019072101
SB2019080907
and 85 more


Showing elements 21 - 40 out of 205