Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument `x-amz-copy-source` to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ceph19 | Jun 29, 2026 | Nov 12, 2025 |
| Debian | — | Upgrade ceph | Feb 2, 2026 | Feb 2, 2026 |
| Ubuntu | — | Upgrade python3-ceph-commonUpgrade librbd-devUpgrade ceph-exporterUpgrade ceph-mgr-rookUpgrade libcephfs2Upgrade libcephfs-java (Ubuntu Pro)Upgrade python3-rgwUpgrade radosgwUpgrade rbd-nbd (Ubuntu Pro)Upgrade ceph-mdsUpgrade python3-cephUpgrade librgw-devUpgrade ceph-immutable-object-cacheUpgrade ceph-osd (Ubuntu Pro)Upgrade ceph-volumeUpgrade ceph-fuseUpgrade librgw-dev (Ubuntu Pro)Upgrade crimson-osdUpgrade rbd-mirror (Ubuntu Pro)Upgrade libradospp-devUpgrade python3-cephfsUpgrade libcephfs-dev (Ubuntu Pro)Upgrade ceph-mgr-k8sevents (Ubuntu Pro)Upgrade librados-devUpgrade cephadmUpgrade libcephfs1 (Ubuntu Pro)Upgrade ceph-grafana-dashboardsUpgrade librbd1 (Ubuntu Pro)Upgrade python3-ceph-argparse (Ubuntu Pro)Upgrade python-ceph (Ubuntu Pro)Upgrade python3-rados (Ubuntu Pro)Upgrade librgw2Upgrade python3-rgw (Ubuntu Pro)Upgrade ceph-commonUpgrade librados2Upgrade python-rados (Ubuntu Pro)Upgrade ceph-fuse (Ubuntu Pro)Upgrade python3-radosUpgrade libradosstriper1 (Ubuntu Pro)Upgrade ceph-mgr-dashboard (Ubuntu Pro)Upgrade python3-rbd (Ubuntu Pro)Upgrade ceph-monUpgrade librbd-dev (Ubuntu Pro)Upgrade python-cephfs (Ubuntu Pro)Upgrade python3-cephfs (Ubuntu Pro)Upgrade libcephfs-javaUpgrade cephfs-shell (Ubuntu Pro)Upgrade ceph-mgr-k8seventsUpgrade ceph-mgr-diskprediction-cloud (Ubuntu Pro)Upgrade ceph-base (Ubuntu Pro)Upgrade libsqlite3-mod-cephUpgrade rbd-fuseUpgrade ceph-mgr-dashboardUpgrade librbd1Upgrade python-rbd (Ubuntu Pro)Upgrade ceph-mgr-diskprediction-local (Ubuntu Pro)Upgrade rados-objclass-devUpgrade libsqlite3-mod-ceph-devUpgrade ceph (Ubuntu Pro)Upgrade libcephfs2 (Ubuntu Pro)Upgrade ceph-mgr-modules-core (Ubuntu Pro)Upgrade ceph-mds (Ubuntu Pro)Upgrade ceph-mon (Ubuntu Pro)Upgrade libcephfs-devUpgrade ceph-common (Ubuntu Pro)Upgrade rbd-nbdUpgrade ceph-resource-agentsUpgrade ceph-mgr (Ubuntu Pro)Upgrade cephfs-mirrorUpgrade ceph-test (Ubuntu Pro)Upgrade cephfs-shellUpgrade ceph-mgr-cephadm (Ubuntu Pro)Upgrade cephadm (Ubuntu Pro)Upgrade python3-rbdUpgrade libcephfs-jni (Ubuntu Pro)Upgrade python3-ceph-common (Ubuntu Pro)Upgrade libradosstriper-devUpgrade librgw2 (Ubuntu Pro)Upgrade ceph-fs-common (Ubuntu Pro)Upgrade ceph-mgr-cephadmUpgrade radosgw (Ubuntu Pro)Upgrade librados2 (Ubuntu Pro)Upgrade librados-dev (Ubuntu Pro)Upgrade ceph-resource-agents (Ubuntu Pro)Upgrade rbd-fuse (Ubuntu Pro)Upgrade python3-ceph-argparseUpgrade ceph-immutable-object-cache (Ubuntu Pro)Upgrade cephUpgrade python3-ceph (Ubuntu Pro)Upgrade ceph-baseUpgrade libradosstriper1Upgrade rest-bench (Ubuntu Pro)Upgrade ceph-prometheus-alertsUpgrade ceph-mgrUpgrade python-rgw (Ubuntu Pro)Upgrade ceph-mgr-modules-coreUpgrade rados-objclass-dev (Ubuntu Pro)Upgrade ceph-mgr-diskprediction-localUpgrade ceph-mgr-rook (Ubuntu Pro)Upgrade libradospp-dev (Ubuntu Pro)Upgrade libradosstriper-dev (Ubuntu Pro)Upgrade ceph-osdUpgrade libcephfs-jniUpgrade rbd-mirror | Feb 26, 2026 | Nov 12, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub