A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a GET Request for a swift URL that ends with two slashes it can cause the rgw to crash, resulting in a denial of service. The greatest threat to the system is of availability.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cephUpgrade ceph16 | Aug 22, 2024 | May 18, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 18, 2021 |
| Centos_linux | — | Upgrade librgw2-debuginfoUpgrade libcephfs2Upgrade python3-radosUpgrade rbd-nbdUpgrade libcephfs-develUpgrade libtcmuUpgrade rbd-nbd-debuginfoUpgrade python3-rbdUpgrade tcmu-runnerUpgrade libcephsqlite-debuginfoUpgrade ceph-iscsiUpgrade libradosstriper1-debuginfoUpgrade librgw-develUpgrade python3-ceph-commonUpgrade ceph-fuse-debuginfoUpgrade libcephfs2-debuginfoUpgrade ceph-grafana-dashboardsUpgrade ceph-immutable-object-cache-debuginfoUpgrade librados-develUpgrade cephfs-mirrorUpgrade ceph-fuseUpgrade librados-devel-debuginfoUpgrade ceph-immutable-object-cacheUpgrade rbd-mirrorUpgrade rbd-fuse-debuginfoUpgrade ceph-commonUpgrade ceph-baseUpgrade python3-rbd-debuginfoUpgrade ceph-mds-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade cephadmUpgrade ceph-osd-debuginfoUpgrade ceph-base-debuginfoUpgrade ceph-selinuxUpgrade python3-ceph-argparseUpgrade ceph-resource-agentsUpgrade ceph-ansibleUpgrade python3-rgw-debuginfoUpgrade cephadm-ansibleUpgrade rbd-mirror-debuginfoUpgrade ceph-mon-debuginfoUpgrade python3-cephfsUpgrade cephfs-topUpgrade ceph-radosgw-debuginfoUpgrade ceph-common-debuginfoUpgrade ceph-debugsourceUpgrade librbd-develUpgrade python3-cephfs-debuginfoUpgrade librgw2Upgrade python3-rados-debuginfoUpgrade ceph-mdsUpgrade libradospp-develUpgrade python3-rgwUpgrade ceph-test-debuginfoUpgrade ceph-mgr-debuginfoUpgrade libradosstriper1Upgrade ceph-radosgw | Apr 5, 2022 | May 18, 2021 |
| Debian | — | Upgrade ceph | Oct 25, 2023 | May 18, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-radosUpgrade librados2Upgrade librbd1Upgrade python-rbd | Aug 10, 2021 | May 18, 2021 |
| Redhat_linux | — | Upgrade python3-ceph-commonUpgrade ceph-iscsiUpgrade ceph-commonUpgrade ceph-radosgw-debuginfoUpgrade ceph-grafana-dashboardsUpgrade librgw2Upgrade rbd-mirror-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade librados-develUpgrade librbd-develUpgrade rbd-fuse-debuginfoUpgrade ceph-immutable-object-cache-debuginfoNo solution existsUpgrade ceph-radosgwUpgrade libcephfs-develUpgrade python3-rbd-debuginfoUpgrade python3-radosUpgrade cephfs-mirrorUpgrade python3-cephfs-debuginfoUpgrade librgw-develUpgrade cephadmUpgrade libcephfs2-debuginfoUpgrade python3-rgwUpgrade libcephfs2Upgrade tcmu-runnerUpgrade ceph-mds-debuginfoUpgrade cephfs-topUpgrade ceph-ansibleUpgrade ceph-mon-debuginfoUpgrade python3-ceph-argparseUpgrade librados-devel-debuginfoUpgrade ceph-mdsUpgrade ceph-fuseUpgrade ceph-common-debuginfoUpgrade python3-cephfsUpgrade python3-rbdUpgrade ceph-selinuxUpgrade python3-rados-debuginfoUpgrade libradospp-develUpgrade ceph-test-debuginfoUpgrade libcephsqlite-debuginfoUpgrade libtcmuUpgrade librgw2-debuginfoUpgrade libradosstriper1-debuginfoUpgrade rbd-nbd-debuginfoUpgrade ceph-osd-debuginfoUpgrade libradosstriper1Upgrade ceph-fuse-debuginfoUpgrade cephadm-ansibleUpgrade rbd-mirrorUpgrade ceph-base-debuginfoUpgrade rbd-nbdUpgrade python3-rgw-debuginfoUpgrade ceph-resource-agentsUpgrade ceph-baseUpgrade ceph-immutable-object-cacheUpgrade ceph-debugsourceUpgrade ceph-mgr-debuginfo | Apr 5, 2022 | May 18, 2021 |
| Suse | — | Upgrade ceph-mgr-diskprediction-localUpgrade ceph-osdUpgrade ceph-grafana-dashboardsUpgrade ceph-mdsUpgrade python3-rbdUpgrade ceph-prometheus-alertsUpgrade ceph-mgr-diskprediction-cloudUpgrade ceph-mgr-modules-coreUpgrade cephfs-shellUpgrade ceph-mgr-k8seventsUpgrade python3-ceph-argparseUpgrade librgw-develUpgrade ceph-mgr-dashboardUpgrade ceph-baseUpgrade python3-radosUpgrade python3-cephfsUpgrade python3-rgwUpgrade librgw2Upgrade libcephfs2Upgrade libradospp-develUpgrade cephadmUpgrade ceph-mgrUpgrade cephUpgrade ceph-testUpgrade rbd-mirrorUpgrade rbd-nbdUpgrade ceph-commonUpgrade librbd1Upgrade ceph-mgr-cephadmUpgrade librados-develUpgrade rados-objclass-develUpgrade ceph-fuseUpgrade ceph-monUpgrade ceph-radosgwUpgrade python3-ceph-commonUpgrade libcephfs-develUpgrade librbd-develUpgrade librados2Upgrade rbd-fuseUpgrade ceph-immutable-object-cacheUpgrade ceph-mgr-rook | Jun 3, 2021 | May 18, 2021 |
| Ubuntu | — | Upgrade ceph-commonUpgrade radosgwUpgrade ceph-mgr-modules-coreUpgrade ceph-mgr-cephadmUpgrade ceph-mgr-k8seventsUpgrade ceph-mgr-rookUpgrade ceph-mgr-dashboardUpgrade ceph-mgrUpgrade ceph-mgr-diskprediction-cloudUpgrade cephadmUpgrade ceph-mgr-diskprediction-localUpgrade cephUpgrade ceph-base | Jun 25, 2021 | May 18, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub