Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument `x-amz-copy-source` to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ceph19 | Jun 29, 2026 | Nov 12, 2025 |
| Debian | — | Upgrade ceph | Feb 2, 2026 | Feb 2, 2026 |
| Ubuntu | — | Upgrade ceph (Ubuntu Pro)Upgrade rbd-mirrorUpgrade ceph-resource-agentsUpgrade libsqlite3-mod-ceph-devUpgrade ceph-mds (Ubuntu Pro)Upgrade ceph-mgr-modules-core (Ubuntu Pro)Upgrade rados-objclass-devUpgrade cephfs-shellUpgrade librados-dev (Ubuntu Pro)Upgrade librados2 (Ubuntu Pro)Upgrade ceph-mgr-cephadmUpgrade ceph-mgr-modules-coreUpgrade radosgw (Ubuntu Pro)Upgrade ceph-fs-common (Ubuntu Pro)Upgrade ceph-common (Ubuntu Pro)Upgrade ceph-baseUpgrade ceph-mgrUpgrade rados-objclass-dev (Ubuntu Pro)Upgrade libradosstriper1Upgrade python-rgw (Ubuntu Pro)Upgrade rest-bench (Ubuntu Pro)Upgrade ceph-prometheus-alertsUpgrade rbd-nbdUpgrade cephfs-mirrorUpgrade libradosstriper-devUpgrade rbd-fuse (Ubuntu Pro)Upgrade cephadm (Ubuntu Pro)Upgrade ceph-osdUpgrade ceph-immutable-object-cache (Ubuntu Pro)Upgrade ceph-mgr-cephadm (Ubuntu Pro)Upgrade python3-ceph-common (Ubuntu Pro)Upgrade python3-rbdUpgrade ceph-mgr-rook (Ubuntu Pro)Upgrade libcephfs-devUpgrade ceph-mon (Ubuntu Pro)Upgrade ceph-mgr-diskprediction-localUpgrade python3-ceph (Ubuntu Pro)Upgrade ceph-test (Ubuntu Pro)Upgrade libcephfs-jni (Ubuntu Pro)Upgrade ceph-mgr (Ubuntu Pro)Upgrade librgw2 (Ubuntu Pro)Upgrade python3-ceph-argparseUpgrade libcephfs-jniUpgrade libradosstriper-dev (Ubuntu Pro)Upgrade libradospp-dev (Ubuntu Pro)Upgrade cephUpgrade ceph-mgr-diskprediction-local (Ubuntu Pro)Upgrade ceph-resource-agents (Ubuntu Pro)Upgrade libcephfs2 (Ubuntu Pro)Upgrade libsqlite3-mod-cephUpgrade librbd1Upgrade python3-rbd (Ubuntu Pro)Upgrade rbd-fuseUpgrade ceph-mgr-dashboardUpgrade ceph-mgr-k8seventsUpgrade ceph-monUpgrade radosgwUpgrade librbd-devUpgrade ceph-mgr-diskprediction-cloud (Ubuntu Pro)Upgrade cephfs-shell (Ubuntu Pro)Upgrade ceph-mdsUpgrade librbd1 (Ubuntu Pro)Upgrade librbd-dev (Ubuntu Pro)Upgrade python-cephfs (Ubuntu Pro)Upgrade ceph-base (Ubuntu Pro)Upgrade ceph-mgr-dashboard (Ubuntu Pro)Upgrade libcephfs-javaUpgrade python-rados (Ubuntu Pro)Upgrade python3-rgw (Ubuntu Pro)Upgrade libcephfs-java (Ubuntu Pro)Upgrade libcephfs2Upgrade python-rbd (Ubuntu Pro)Upgrade librados2Upgrade ceph-fuse (Ubuntu Pro)Upgrade libradosstriper1 (Ubuntu Pro)Upgrade crimson-osdUpgrade python3-rados (Ubuntu Pro)Upgrade python-ceph (Ubuntu Pro)Upgrade librados-devUpgrade libcephfs1 (Ubuntu Pro)Upgrade ceph-mgr-k8sevents (Ubuntu Pro)Upgrade python3-ceph-argparse (Ubuntu Pro)Upgrade libcephfs-dev (Ubuntu Pro)Upgrade libradospp-devUpgrade python3-cephfsUpgrade rbd-mirror (Ubuntu Pro)Upgrade librgw2Upgrade python3-radosUpgrade cephadmUpgrade python3-cephUpgrade python3-ceph-commonUpgrade ceph-commonUpgrade ceph-mgr-rookUpgrade python3-rgwUpgrade ceph-grafana-dashboardsUpgrade ceph-volumeUpgrade ceph-immutable-object-cacheUpgrade librgw-dev (Ubuntu Pro)Upgrade ceph-osd (Ubuntu Pro)Upgrade ceph-fuseUpgrade librgw-devUpgrade ceph-exporterUpgrade rbd-nbd (Ubuntu Pro)Upgrade python3-cephfs (Ubuntu Pro) | Feb 26, 2026 | Nov 12, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub