A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a GET Request for a swift URL that ends with two slashes it can cause the rgw to crash, resulting in a denial of service. The greatest threat to the system is of availability.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ceph16Upgrade ceph | Aug 22, 2024 | May 18, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 18, 2021 |
| Centos_linux | — | Upgrade cephfs-mirrorUpgrade ceph-baseUpgrade python3-ceph-commonUpgrade rbd-mirrorUpgrade python3-rbd-debuginfoUpgrade python3-rbdUpgrade rbd-fuse-debuginfoUpgrade ceph-fuseUpgrade rbd-nbd-debuginfoUpgrade tcmu-runnerUpgrade ceph-commonUpgrade librados-devel-debuginfoUpgrade librgw-develUpgrade librados-develUpgrade libcephsqlite-debuginfoUpgrade ceph-immutable-object-cacheUpgrade libcephfs-develUpgrade libtcmuUpgrade ceph-mds-debuginfoUpgrade cephadmUpgrade cephfs-mirror-debuginfoUpgrade ceph-fuse-debuginfoUpgrade libcephfs2Upgrade rbd-nbdUpgrade librgw2-debuginfoUpgrade ceph-grafana-dashboardsUpgrade libcephfs2-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade ceph-iscsiUpgrade python3-radosUpgrade libradosstriper1-debuginfoUpgrade rbd-mirror-debuginfoUpgrade python3-ceph-argparseUpgrade ceph-base-debuginfoUpgrade python3-rgwUpgrade ceph-mdsUpgrade libradospp-develUpgrade ceph-resource-agentsUpgrade python3-rados-debuginfoUpgrade ceph-osd-debuginfoUpgrade ceph-selinuxUpgrade python3-cephfsUpgrade librbd-develUpgrade python3-cephfs-debuginfoUpgrade librgw2Upgrade ceph-debugsourceUpgrade ceph-common-debuginfoUpgrade ceph-mgr-debuginfoUpgrade cephfs-topUpgrade ceph-radosgw-debuginfoUpgrade ceph-mon-debuginfoUpgrade libradosstriper1Upgrade ceph-test-debuginfoUpgrade ceph-ansibleUpgrade ceph-radosgwUpgrade cephadm-ansibleUpgrade python3-rgw-debuginfo | Apr 5, 2022 | May 18, 2021 |
| Debian | — | Upgrade ceph | Oct 25, 2023 | May 18, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-radosUpgrade python-rbdUpgrade librados2Upgrade librbd1 | Aug 10, 2021 | May 18, 2021 |
| Redhat_linux | — | Upgrade cephfs-mirrorUpgrade ceph-radosgw-debuginfoUpgrade ceph-iscsiUpgrade ceph-ansibleUpgrade python3-ceph-commonUpgrade librgw2Upgrade libcephfs2Upgrade python3-cephfs-debuginfoUpgrade ceph-radosgwUpgrade libcephfs-develUpgrade rbd-fuse-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade ceph-grafana-dashboardsUpgrade rbd-mirror-debuginfoUpgrade cephadmUpgrade python3-rgwUpgrade ceph-immutable-object-cache-debuginfoUpgrade libcephfs2-debuginfoUpgrade tcmu-runnerUpgrade python3-radosNo solution existsUpgrade python3-rbd-debuginfoUpgrade librbd-develUpgrade cephfs-topUpgrade ceph-commonUpgrade librados-develUpgrade librgw-develUpgrade ceph-mds-debuginfoUpgrade python3-rgw-debuginfoUpgrade ceph-mon-debuginfoUpgrade ceph-test-debuginfoUpgrade ceph-resource-agentsUpgrade ceph-base-debuginfoUpgrade librados-devel-debuginfoUpgrade libtcmuUpgrade rbd-nbdUpgrade ceph-osd-debuginfoUpgrade libradosstriper1Upgrade rbd-nbd-debuginfoUpgrade libradosstriper1-debuginfoUpgrade librgw2-debuginfoUpgrade ceph-fuse-debuginfoUpgrade ceph-selinuxUpgrade libradospp-develUpgrade python3-rados-debuginfoUpgrade ceph-fuseUpgrade ceph-immutable-object-cacheUpgrade ceph-mdsUpgrade python3-cephfsUpgrade ceph-common-debuginfoUpgrade python3-rbdUpgrade rbd-mirrorUpgrade cephadm-ansibleUpgrade libcephsqlite-debuginfoUpgrade python3-ceph-argparseUpgrade ceph-mgr-debuginfoUpgrade ceph-baseUpgrade ceph-debugsource | Apr 5, 2022 | May 18, 2021 |
| Suse | — | Upgrade libradospp-develUpgrade ceph-prometheus-alertsUpgrade ceph-mgr-diskprediction-localUpgrade cephfs-shellUpgrade librgw2Upgrade ceph-mdsUpgrade ceph-grafana-dashboardsUpgrade ceph-mgr-dashboardUpgrade python3-radosUpgrade python3-cephfsUpgrade python3-rgwUpgrade python3-ceph-argparseUpgrade ceph-mgr-diskprediction-cloudUpgrade ceph-mgr-modules-coreUpgrade ceph-baseUpgrade ceph-osdUpgrade python3-rbdUpgrade librgw-develUpgrade libcephfs2Upgrade ceph-mgr-k8seventsUpgrade librados2Upgrade librbd1Upgrade rbd-nbdUpgrade rbd-mirrorUpgrade ceph-testUpgrade ceph-immutable-object-cacheUpgrade ceph-mgrUpgrade librbd-develUpgrade librados-develUpgrade ceph-mgr-cephadmUpgrade ceph-commonUpgrade cephadmUpgrade cephUpgrade ceph-mgr-rookUpgrade rbd-fuseUpgrade ceph-radosgwUpgrade ceph-monUpgrade ceph-fuseUpgrade libcephfs-develUpgrade rados-objclass-develUpgrade python3-ceph-common | Jun 3, 2021 | May 18, 2021 |
| Ubuntu | — | Upgrade cephadmUpgrade cephUpgrade ceph-mgr-diskprediction-localUpgrade ceph-mgr-diskprediction-cloudUpgrade ceph-mgr-rookUpgrade ceph-baseUpgrade ceph-mgr-k8seventsUpgrade ceph-mgr-dashboardUpgrade ceph-mgrUpgrade ceph-mgr-modules-coreUpgrade ceph-commonUpgrade ceph-mgr-cephadmUpgrade radosgw | Jun 25, 2021 | May 18, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub