Read the docs
TI-2015-04405 Aliases CVE-2015-5245GHSA-782g-wgjp-wr8j

CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph…

Priority LOW 24Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
None · Partial · None
Fix status
Partial Red Hat: 6 fixed, 1 without a fix

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

CRLF injection vulnerability in the Ceph Object Gateway (aka radosgw or RGW) in Ceph before 0.94.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted bucket name.

Why it matters now

EPSS 0.01907 79th percentileScored 2026-11-07
Fix Partial Red Hat: 2 advisoriesRed Hat: 6 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:redhat:ceph:*:*:*:*:*:*:*:*up to 0.94.3VulnerableRed Hat
  • cpe:2.3:a:redhat:ceph:*:*:*:*:*:*:*:* Versions up to 0.94.3 Vulnerable ·Red Hat

Remediation

Red Hat 2 advisories

  • RHSA-2015:2066 Released 2015-11-23 · Red Hat rating Moderate
    Red Hat Ceph Storage 1.3.1 security, bug fix, and enhancement update
    • Red Hat Ceph Storage Calamari 1.3 calamari-server-1.3-11.el7cp
    • Red Hat Ceph Storage Installer 1.3 ceph-deploy-1.5.27.3-1.el7cp, ceph-puppet-modules-0.1.1-1.el7cp, facter-1:1.7.6-2.1.el7sat +47
    • Red Hat Ceph Storage MON 1.3 babeltrace-1.2.4-3.el7cp, ceph-1:0.94.3-3.el7cp, ceph-common-1:0.94.3-3.el7cp +18
    • Red Hat Ceph Storage OSD 1.3 babeltrace-1.2.4-3.el7cp, ceph-1:0.94.3-3.el7cp, ceph-common-1:0.94.3-3.el7cp +18
    • Red Hat Ceph Storage Tools 1.3 babeltrace-1.2.4-3.el7cp, ceph-1:0.94.3-3.el7cp, ceph-common-1:0.94.3-3.el7cp +18
  • RHSA-2015:2512 Released 2015-11-23 · Red Hat rating Moderate
    Red Hat Ceph Storage 1.3.1 security, bug fix, and enhancement update
    • Red Hat Ceph Storage 1.3 for Ubuntu

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Ceph Storage 1.2AffectedNo fix planned: Will not fix
Red Hat Ceph Storage 1.3 for UbuntuFixed RHSA-2015:2512
Red Hat Ceph Storage Calamari 1.3Fixed RHSA-2015:2066
Red Hat Ceph Storage Installer 1.3Fixed RHSA-2015:2066
Red Hat Ceph Storage MON 1.3Fixed RHSA-2015:2066
Red Hat Ceph Storage OSD 1.3Fixed RHSA-2015:2066
Red Hat Ceph Storage Tools 1.3Fixed RHSA-2015:2066

Timeline

  1. 2026-10-02 Threatist record created from CVE-2015-5245
  2. 2026-10-03 Alias added: GHSA-782g-wgjp-wr8j

References

Advisory 2

Other 1

  • TI-2024-32120 RGW DoS attack with empty HTTP header in S3 object copy CVSS 3.1HIGH 7.5
  • TI-2020-15677 Authentication bypass by capture-replay in ceph CVSS 3.1HIGH 8.8
  • TI-2018-05266 In Ceph before 12.2.3 and 13.x through 13.0.1, the rgw_civetweb.cc RGWCivetWeb::init_env… CVSS 3.0HIGH 7.5
  • TI-2018-01045 Authentication bypass by capture-replay in Red Hat ceph CVSS 3.0HIGH 7.5
  • TI-2022-03356 A privilege escalation flaw was found in Ceph. CVSS 3.1HIGH 7.8
  • TI-2018-12099 Sensitive information in log files in ceph CVSS 3.0HIGH 7.5
See all 16 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences