Product by Red Hat

    Red Hat Ceph Storage 8

    12 known vulnerabilities in Red Hat Ceph Storage 8 (Red Hat), 0 of them actively exploited (CISA KEV).

    Key figures

    12

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Red Hat Ceph Storage 8 (Red Hat)
    MediumCVE-2025-4598

    Systemd-coredump: Signal Handler Race Condition

    also in 20 other products

    4.7
    HighCVE-2025-11561

    Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems

    also in 31 other products

    8.8
    HighCVE-2025-13601

    Glib: integer overflow in in g_escape_uri_string()

    also in 60 other products

    7.7
    MediumCVE-2024-11831

    Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript

    also in 38 other products

    5.4
    HighCVE-2025-14874

    Nodemailer: nodemailer: denial of service via crafted email address header

    also in 6 other products

    7.5
    MediumCVE-2025-14831

    Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification

    also in 28 other products

    5.3
    MediumCVE-2025-12801

    Nfs-utils: rpc.mountd in the nfs-utils privilege escalation

    also in 15 other products

    6.5
    MediumCVE-2026-18495

    Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough

    also in 10 other products

    6.1
    MediumCVE-2025-14104

    Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames

    also in 16 other products

    6.1
    MediumCVE-2025-9820

    Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function

    also in 21 other products

    4.0
    LowCVE-2025-8556

    Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results

    also in 21 other products

    3.7
    MediumCVE-2025-14010

    Ansible-collections Ansible Community General Collection: Information Disclosure

    also in 6 other products

    5.5

    All products by Red Hat