A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a GET Request for a swift URL that ends with two slashes it can cause the rgw to crash, resulting in a denial of service. The greatest threat to the system is of availability.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cephUpgrade ceph16 | Aug 22, 2024 | May 18, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 18, 2021 |
| Centos_linux | — | Upgrade cephadmUpgrade cephfs-mirror-debuginfoUpgrade rbd-fuse-debuginfoUpgrade ceph-fuse-debuginfoUpgrade ceph-baseUpgrade ceph-fuseUpgrade ceph-immutable-object-cacheUpgrade libcephsqlite-debuginfoUpgrade libradosstriper1-debuginfoUpgrade python3-radosUpgrade ceph-iscsiUpgrade librados-devel-debuginfoUpgrade ceph-commonUpgrade ceph-grafana-dashboardsUpgrade librgw-develUpgrade python3-rbdUpgrade ceph-mds-debuginfoUpgrade rbd-mirrorUpgrade libcephfs2-debuginfoUpgrade librgw2-debuginfoUpgrade libcephfs2Upgrade rbd-nbdUpgrade ceph-immutable-object-cache-debuginfoUpgrade librados-develUpgrade python3-ceph-commonUpgrade python3-rbd-debuginfoUpgrade cephfs-mirrorUpgrade tcmu-runnerUpgrade libtcmuUpgrade libcephfs-develUpgrade rbd-nbd-debuginfoUpgrade ceph-osd-debuginfoUpgrade ceph-resource-agentsUpgrade ceph-test-debuginfoUpgrade cephfs-topUpgrade ceph-radosgw-debuginfoUpgrade ceph-mon-debuginfoUpgrade python3-cephfsUpgrade python3-ceph-argparseUpgrade ceph-mdsUpgrade librbd-develUpgrade python3-cephfs-debuginfoUpgrade librgw2Upgrade ceph-debugsourceUpgrade ceph-common-debuginfoUpgrade ceph-selinuxUpgrade ceph-ansibleUpgrade python3-rgw-debuginfoUpgrade cephadm-ansibleUpgrade libradosstriper1Upgrade ceph-radosgwUpgrade ceph-mgr-debuginfoUpgrade python3-rgwUpgrade rbd-mirror-debuginfoUpgrade ceph-base-debuginfoUpgrade libradospp-develUpgrade python3-rados-debuginfo | Apr 5, 2022 | May 18, 2021 |
| Debian | — | Upgrade ceph | Oct 25, 2023 | May 18, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-radosUpgrade librados2Upgrade python-rbdUpgrade librbd1 | Aug 10, 2021 | May 18, 2021 |
| Redhat_linux | — | Upgrade cephfs-topUpgrade ceph-grafana-dashboardsUpgrade ceph-iscsiUpgrade ceph-mds-debuginfoUpgrade librbd-develUpgrade libcephfs-develUpgrade librgw2Upgrade ceph-commonUpgrade python3-rbd-debuginfoUpgrade librgw-develUpgrade python3-radosUpgrade rbd-fuse-debuginfoUpgrade python3-cephfs-debuginfoUpgrade libcephfs2Upgrade rbd-mirror-debuginfoUpgrade ceph-ansibleUpgrade cephadmUpgrade ceph-radosgwUpgrade ceph-radosgw-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade cephfs-mirrorUpgrade librados-develUpgrade python3-ceph-commonUpgrade ceph-immutable-object-cache-debuginfoNo solution existsUpgrade libcephfs2-debuginfoUpgrade python3-rgwUpgrade tcmu-runnerUpgrade ceph-baseUpgrade ceph-mgr-debuginfoUpgrade python3-ceph-argparseUpgrade ceph-fuse-debuginfoUpgrade rbd-mirrorUpgrade libradospp-develUpgrade ceph-resource-agentsUpgrade ceph-selinuxUpgrade ceph-debugsourceUpgrade cephadm-ansibleUpgrade ceph-mon-debuginfoUpgrade python3-rgw-debuginfoUpgrade libradosstriper1-debuginfoUpgrade librgw2-debuginfoUpgrade libradosstriper1Upgrade rbd-nbd-debuginfoUpgrade ceph-osd-debuginfoUpgrade libtcmuUpgrade ceph-test-debuginfoUpgrade libcephsqlite-debuginfoUpgrade ceph-immutable-object-cacheUpgrade python3-cephfsUpgrade ceph-mdsUpgrade ceph-fuseUpgrade ceph-common-debuginfoUpgrade python3-rbdUpgrade python3-rados-debuginfoUpgrade librados-devel-debuginfoUpgrade ceph-base-debuginfoUpgrade rbd-nbd | Apr 5, 2022 | May 18, 2021 |
| Suse | — | Upgrade librgw-develUpgrade ceph-mgr-dashboardUpgrade libcephfs2Upgrade python3-cephfsUpgrade ceph-mgr-modules-coreUpgrade python3-radosUpgrade ceph-osdUpgrade python3-ceph-argparseUpgrade librgw2Upgrade ceph-mgr-k8seventsUpgrade cephfs-shellUpgrade ceph-mgr-diskprediction-localUpgrade libradospp-develUpgrade ceph-grafana-dashboardsUpgrade ceph-mgr-diskprediction-cloudUpgrade ceph-prometheus-alertsUpgrade python3-rgwUpgrade ceph-baseUpgrade python3-rbdUpgrade ceph-mdsUpgrade ceph-monUpgrade rbd-fuseUpgrade cephadmUpgrade librados-develUpgrade ceph-mgrUpgrade librbd1Upgrade ceph-radosgwUpgrade cephUpgrade ceph-mgr-rookUpgrade python3-ceph-commonUpgrade ceph-mgr-cephadmUpgrade libcephfs-develUpgrade ceph-immutable-object-cacheUpgrade ceph-commonUpgrade ceph-testUpgrade rbd-mirrorUpgrade rbd-nbdUpgrade rados-objclass-develUpgrade librados2Upgrade ceph-fuseUpgrade librbd-devel | Jun 3, 2021 | May 18, 2021 |
| Ubuntu | — | Upgrade ceph-mgr-diskprediction-localUpgrade ceph-baseUpgrade ceph-mgr-rookUpgrade ceph-mgrUpgrade cephadmUpgrade ceph-mgr-diskprediction-cloudUpgrade ceph-mgr-k8seventsUpgrade ceph-mgr-dashboardUpgrade cephUpgrade ceph-commonUpgrade radosgwUpgrade ceph-mgr-cephadmUpgrade ceph-mgr-modules-core | Jun 25, 2021 | May 18, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub