Read the docs

Red Hat

Records7413All Threatist records
Exploited (KEV)98In CISA KEV
CVSS critical792CVSS 9.0–10.0
CVSS high2681CVSS 7.0–8.9

Exploited now

Red Hat records in CISA KEV
TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability Priority CRITICAL 93KEV 2026-10-28TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2026-35991 Kludex Starlette HTTP Request/Response Smuggling Vulnerability Priority CRITICAL 86KEV 2026-09-02TI-2015-02874 Red Hat Libuser Race Condition Vulnerability Priority CRITICAL 92KEV 2026-08-26TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Priority CRITICAL 93KEV 2026-08-26TI-2026-26741 Apache Tomcat Missing Encryption of Sensitive Data Vulnerability Priority CRITICAL 90KEV 2026-08-04

Components

Products in the NVD configurations · select one to filter the records
Enterprise Linux 1956 records CRITICAL Enterprise Linux Desktop 1928 records CRITICAL Enterprise Linux Server 1891 records CRITICAL Enterprise Linux Workstation 1845 records CRITICAL Enterprise Linux Server Aus 1061 records CRITICAL Enterprise Linux Eus 796 records CRITICAL Enterprise Linux Server Tus 770 records CRITICAL Enterprise Linux Server Eus 622 records CRITICAL

Records

17 records in Ceph · all components

TI-2020-15677 CVE-2020-25660 · GHSA-457q-vj84-7r8r

Authentication bypass by capture-replay in ceph

Priority MEDIUM 40

A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2.14, where it does not verify Ceph clients correctly and is then vulnerable to replay attacks in Nautilus.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01034 Published 2020-11-23 Partial fix CWE-294
TI-2018-01045 CVE-2018-1128 · GHSA-xw3f-9qfw-v43f

Authentication bypass by capture-replay in Red Hat ceph

Priority LOW 36

It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack.

CVSS 3.0HIGH 7.5 Adjacent network No auth No interaction EPSS 0.01386 Published 2018-07-10 Partial fix CWE-294
TI-2018-12099 CVE-2018-16889 · GHSA-2xfm-mgc4-j8fx

Sensitive information in log files in ceph

Priority LOW 34

Ceph does not properly sanitize encryption keys in debug logging for v4 auth.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00536 Published 2019-01-28 Fixed CWE-532
TI-2018-12056 CVE-2018-16846 · GHSA-77fq-6x6c-cq7q

Resource allocation without limits in [UNKNOWN] ceph

Priority LOW 33

It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02136 Published 2019-01-15 Partial fix CWE-770
TI-2017-12370 CVE-2017-16818 · GHSA-8cwf-cg6r-crcf

RADOS Gateway in Ceph 12.1.0 through 12.2.1 allows remote authenticated users to cause a…

Priority LOW 33

RADOS Gateway in Ceph 12.1.0 through 12.2.1 allows remote authenticated users to cause a denial of service (assertion failure and application exit) by leveraging "full" (not necessarily admin) privileges to post an inval…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02313 Published 2017-12-20 No fix listed CWE-617
TI-2016-07088 CVE-2016-8626 · GHSA-784r-h477-mqpc

NULL pointer dereference in Red Hat Ceph

Priority LOW 33

A flaw was found in Red Hat Ceph before 0.94.9-8.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0228 Published 2018-07-31 Fixed CWE-476
TI-2021-02483 CVE-2021-3524 · GHSA-3rmw-wm6w-rmcr

Improper input validation in ceph

Priority LOW 32

A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01604 Published 2021-05-17 Partial fix CWE-20
TI-2020-16866 CVE-2020-27781 · GHSA-mh9p-7vgq-83jw

Insufficiently protected credentials in Ceph

Priority LOW 31

User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential privilege escalation.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00295 Published 2020-12-18 Partial fix CWE-522
TI-2021-02488 CVE-2021-3531 · GHSA-wc6g-g56r-jp2f

Improper input validation in ceph

Priority LOW 28

A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02177 Published 2021-05-18 Partial fix CWE-20
TI-2018-10525 CVE-2018-14662 · GHSA-w2x2-w9fr-cf6g

Improper authorization in [UNKNOWN] ceph

Priority LOW 26

It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.0049 Published 2019-01-15 Partial fix CWE-285
TI-2020-15695 CVE-2020-25678 · GHSA-h22j-342g-797c

Cleartext storage of sensitive information in ceph

Priority LOW 20

A flaw was found in ceph in versions prior to 16.y.z where ceph stores mgr module passwords in clear text.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00256 Published 2021-01-08 Partial fix CWE-312
Open these records in search →