A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a GET Request for a swift URL that ends with two slashes it can cause the rgw to crash, resulting in a denial of service. The greatest threat to the system is of availability.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cephUpgrade ceph16 | Aug 22, 2024 | May 18, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 18, 2021 |
| Centos_linux | — | Upgrade ceph-mon-debuginfoUpgrade cephfs-topUpgrade python3-rados-debuginfoUpgrade ceph-base-debuginfoUpgrade ceph-mdsUpgrade ceph-radosgw-debuginfoUpgrade libradospp-develUpgrade python3-cephfsUpgrade python3-cephfs-debuginfoUpgrade librgw2Upgrade ceph-common-debuginfoUpgrade ceph-debugsourceUpgrade python3-ceph-argparseUpgrade rbd-mirror-debuginfoUpgrade ceph-resource-agentsUpgrade librbd-develUpgrade libradosstriper1Upgrade ceph-radosgwUpgrade python3-rgw-debuginfoUpgrade ceph-test-debuginfoUpgrade ceph-mgr-debuginfoUpgrade python3-rgwUpgrade cephadm-ansibleUpgrade ceph-ansibleUpgrade ceph-selinuxUpgrade ceph-osd-debuginfoUpgrade rbd-nbdUpgrade ceph-fuse-debuginfoUpgrade ceph-baseUpgrade rbd-mirrorUpgrade ceph-immutable-object-cacheUpgrade ceph-fuseUpgrade ceph-mds-debuginfoUpgrade ceph-commonUpgrade cephadmUpgrade python3-rbd-debuginfoUpgrade rbd-fuse-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade librgw2-debuginfoUpgrade libradosstriper1-debuginfoUpgrade ceph-iscsiUpgrade ceph-immutable-object-cache-debuginfoUpgrade ceph-grafana-dashboardsUpgrade libcephfs2-debuginfoUpgrade libcephfs2Upgrade python3-radosUpgrade libcephsqlite-debuginfoUpgrade librgw-develUpgrade librados-devel-debuginfoUpgrade python3-rbdUpgrade librados-develUpgrade rbd-nbd-debuginfoUpgrade tcmu-runnerUpgrade libtcmuUpgrade libcephfs-develUpgrade python3-ceph-commonUpgrade cephfs-mirror | Apr 5, 2022 | May 18, 2021 |
| Debian | — | Upgrade ceph | Oct 25, 2023 | May 18, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-rbdUpgrade librbd1Upgrade librados2Upgrade python-rados | Aug 10, 2021 | May 18, 2021 |
| Redhat_linux | — | Upgrade cephfs-mirrorUpgrade cephfs-mirror-debuginfoUpgrade ceph-mds-debuginfoUpgrade ceph-ansibleUpgrade python3-radosNo solution existsUpgrade ceph-immutable-object-cache-debuginfoUpgrade cephfs-topUpgrade ceph-iscsiUpgrade ceph-radosgw-debuginfoUpgrade ceph-radosgwUpgrade librgw2Upgrade ceph-commonUpgrade librgw-develUpgrade python3-ceph-commonUpgrade python3-rbd-debuginfoUpgrade rbd-fuse-debuginfoUpgrade cephadmUpgrade libcephfs2-debuginfoUpgrade tcmu-runnerUpgrade python3-rgwUpgrade libcephfs-develUpgrade rbd-mirror-debuginfoUpgrade librados-develUpgrade ceph-grafana-dashboardsUpgrade python3-cephfs-debuginfoUpgrade libcephfs2Upgrade librbd-develUpgrade ceph-mon-debuginfoUpgrade ceph-fuse-debuginfoUpgrade ceph-osd-debuginfoUpgrade librgw2-debuginfoUpgrade rbd-mirrorUpgrade cephadm-ansibleUpgrade python3-rbdUpgrade ceph-mdsUpgrade ceph-immutable-object-cacheUpgrade ceph-test-debuginfoUpgrade ceph-mgr-debuginfoUpgrade libradospp-develUpgrade librados-devel-debuginfoUpgrade ceph-selinuxUpgrade libtcmuUpgrade ceph-common-debuginfoUpgrade rbd-nbdUpgrade python3-rgw-debuginfoUpgrade ceph-fuseUpgrade rbd-nbd-debuginfoUpgrade ceph-base-debuginfoUpgrade ceph-baseUpgrade ceph-resource-agentsUpgrade ceph-debugsourceUpgrade python3-ceph-argparseUpgrade libradosstriper1-debuginfoUpgrade libcephsqlite-debuginfoUpgrade python3-rados-debuginfoUpgrade python3-cephfsUpgrade libradosstriper1 | Apr 5, 2022 | May 18, 2021 |
| Suse | — | Upgrade ceph-osdUpgrade librgw-develUpgrade libcephfs2Upgrade cephfs-shellUpgrade ceph-mgr-diskprediction-localUpgrade python3-rgwUpgrade python3-ceph-argparseUpgrade libradospp-develUpgrade ceph-mgr-k8seventsUpgrade ceph-grafana-dashboardsUpgrade ceph-mgr-diskprediction-cloudUpgrade python3-rbdUpgrade ceph-prometheus-alertsUpgrade ceph-mgr-dashboardUpgrade python3-cephfsUpgrade librgw2Upgrade python3-radosUpgrade ceph-mdsUpgrade ceph-mgr-modules-coreUpgrade ceph-baseUpgrade rados-objclass-develUpgrade ceph-immutable-object-cacheUpgrade librados-develUpgrade ceph-testUpgrade rbd-nbdUpgrade cephadmUpgrade python3-ceph-commonUpgrade librbd-develUpgrade librados2Upgrade librbd1Upgrade ceph-monUpgrade rbd-fuseUpgrade ceph-commonUpgrade ceph-radosgwUpgrade ceph-mgr-rookUpgrade cephUpgrade libcephfs-develUpgrade rbd-mirrorUpgrade ceph-mgr-cephadmUpgrade ceph-mgrUpgrade ceph-fuse | Jun 3, 2021 | May 18, 2021 |
| Ubuntu | — | Upgrade ceph-mgr-dashboardUpgrade ceph-baseUpgrade ceph-mgrUpgrade ceph-mgr-diskprediction-localUpgrade cephUpgrade ceph-mgr-k8seventsUpgrade ceph-mgr-diskprediction-cloudUpgrade ceph-mgr-rookUpgrade cephadmUpgrade radosgwUpgrade ceph-commonUpgrade ceph-mgr-modules-coreUpgrade ceph-mgr-cephadm | Jun 25, 2021 | May 18, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub