Product by Debian
Ceph
17 known vulnerabilities in Ceph (Debian), 0 of them actively exploited (CISA KEV).
Key figures
17
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2018-10861 | Red Hat Ceph: Improper Authorization | 8.1 | |
| Critical | CVE-2023-43040 | IBM Spectrum Fusion HCI improper access control | 6.5 | |
| High | CVE-2021-20288 | Ceph: Improper Authentication | 7.2 | |
| Medium | CVE-2018-16846 | Ceph: Allocation of Resources Without Limits or Throttling | 6.5 | |
| Critical | CVE-2022-0670 | Ceph: Incorrect Authorization | 9.1 | |
| Medium | CVE-2018-1129 | Red Hat Ceph: Improper Access Control | 6.5 | |
| High | CVE-2018-1128 | Red Hat Ceph: Authentication Bypass by Capture-replay | 7.5 | |
| Medium | CVE-2021-3524 | Ceph: Improper Input Validation | 6.5 | |
| Medium | CVE-2020-1760 | Ceph: Cross-site Scripting | 5.8 | |
| High | CVE-2024-47866 | RGW DoS attack with empty HTTP header in S3 object copy | 7.5 | |
| High | CVE-2024-48916 | Ceph is vulnerable to authentication bypass through RadosGW | 8.1 | |
| Medium | CVE-2021-3979 | Ceph: Use of a Broken or Risky Cryptographic Algorithm | 6.5 | |
| High | CVE-2022-3650 | Red hat Ceph: Placement of User into Incorrect Group | 7.8 | |
| Medium | CVE-2025-52555 | CephFS Permission Escalation Vulnerability in Ceph Fuse mounted FS | 6.5 | |
| Medium | CVE-2018-14662 | Ceph: Improper Authorization | 3.5 | |
| Medium | CVE-2017-7519 | Ceph: Use of Externally-Controlled Format String | 2.3 | |
| Not rated | CVE-2024-31884 | Debian Ceph: security vulnerability | — |