Lucene search
+L

55 matches found

SUSE CVE
SUSE CVE
•added 2025/11/13 12:45 a.m.•9 views

SUSE CVE-2024-47866

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no...

7.5CVSS6.8AI score0.0045EPSS
SaveExploits1References3
OSV
OSV
•added 2025/11/12 7:15 p.m.•10 views

DEBIAN-CVE-2024-47866

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no...

7.5CVSS7.1AI score0.0045EPSS
SaveExploits1References1
NVD
NVD
•added 2025/11/12 7:15 p.m.•21 views

CVE-2024-47866

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no...

7.5CVSS0.0045EPSS
SaveExploits1References2
OSV
OSV
•added 2025/11/12 7:15 p.m.•15 views

AZL-70058 CVE-2024-47866 affecting package ceph for versions less than 18.2.2-12

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no...

7.5CVSS7AI score0.0045EPSS
SaveExploits1References1
OSV
OSV
•added 2025/11/12 7:15 p.m.•14 views

UBUNTU-CVE-2024-47866

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no...

7.5CVSS5.7AI score0.0045EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/11/12 6:28 p.m.•13 views

EUVD-2024-55069

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no...

7.5CVSS5.9AI score0.0045EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/11/12 6:28 p.m.•5 views

CVE-2024-47866 RGW DoS attack with empty HTTP header in S3 object copy

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no...

7.5CVSS7AI score0.0045EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
•added 2025/11/12 6:28 p.m.•33 views

CVE-2024-47866

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no...

7.5CVSS7AI score0.0045EPSS
SaveExploits1
Cvelist
Cvelist
•added 2025/11/12 6:28 p.m.•30 views

CVE-2024-47866 RGW DoS attack with empty HTTP header in S3 object copy

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no...

7.5CVSS0.0045EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2025/11/12 6:28 p.m.•17 views

CVE-2024-47866

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no...

7.5CVSS7AI score0.0045EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/11/12 6:33 a.m.•17 views

CVE-2024-47866

A flaw was found in Ceph RGW. Using the x-amz-copy-source header to upload an empty object will cause Ceph RGW to crash, leading to availability issues. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteri...

7.5CVSS6AI score0.0045EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2025/11/12 2:43 a.m.•16 views

rgw: RGW DoS attack with empty HTTP header in S3 object copy

A flaw was found in Ceph RGW. Using the x-amz-copy-source header to upload an empty object will cause Ceph RGW to crash, leading to availability issues...

7.5CVSS7.1AI score0.0045EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/11/12 12:00 a.m.•15 views

Ceph 输入验证错误漏洞

Ceph is a file storage platform from Ceph open source. An input validation error vulnerability exists in Ceph 19.2.3 and earlier versions, which stems from improper handling of the x-amz-copy-source parameter and could lead to a denial of service...

7.5CVSS6.3AI score0.0045EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/12 12:00 a.m.•1 views

CVE-2024-47866: Improper Input Validation

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no...

7.5CVSS5.6AI score0.0045EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/10/22 12:00 a.m.•15 views

PT-2025-46556

Name of the Vulnerable Software and Affected Versions Ceph affected versions not specified Description A denial-of-service issue exists in Ceph’s RGW component due to improper input validation. Specifically, providing an empty string as the content for the x-amz-copy-source argument when putting ...

7.8CVSS6.4AI score0.0045EPSS
SaveExploits1References31
Rows per page
Query Builder