CVE-2024-47866
Fixed in a distro release EPSS <1%CVSS 7.5
Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument `x-amz-copy-source` to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no known patched versions exist.
Products: ceph
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | ceph | 14.2.21-1+deb11u2 |
| Debian 12 | ceph | 16.2.15+ds-0+deb12u2 |
| Debian 13 | ceph | 18.2.7+ds-1+deb13u1 |
| Debian 14 | ceph | 18.2.7+ds-1.1 |
| Red Hat ceph storage 7.1 | ceph | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-base | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-base | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-base-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-base-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-common | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-common | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-common-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-common-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-debugsource | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-debugsource | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-exporter-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-exporter-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-fuse | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-fuse | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-fuse-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-fuse-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-immutable-object-cache | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-immutable-object-cache | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-immutable-object-cache-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-immutable-object-cache-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-mds-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-mds-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-mgr-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-mgr-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-mib | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-mib | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-mon-client-nvmeof-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-mon-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-mon-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-osd-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-osd-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-radosgw-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-radosgw-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-resource-agents | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-resource-agents | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-selinux | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-selinux | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | ceph-test-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | ceph-test-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | cephadm | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | cephfs-mirror-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | cephfs-mirror-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | cephfs-top | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | cephfs-top | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | libcephfs-devel | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | libcephfs-devel | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | libcephfs2 | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | libcephfs2 | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | libcephfs2-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | libcephfs2-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | libcephsqlite-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | libcephsqlite-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | librados-devel | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | librados-devel | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | librados-devel-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | librados-devel-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | librados2 | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | librados2 | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | librados2-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | librados2-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | libradospp-devel | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | libradospp-devel | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | libradosstriper1 | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | libradosstriper1 | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | libradosstriper1-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | libradosstriper1-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | librbd-devel | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | librbd-devel | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | librbd1 | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | librbd1 | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | librbd1-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | librbd1-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | librgw-devel | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | librgw-devel | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | librgw2 | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | librgw2 | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | librgw2-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | librgw2-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | python3-ceph-argparse | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | python3-ceph-argparse | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | python3-ceph-common | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | python3-ceph-common | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | python3-cephfs | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | python3-cephfs | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | python3-cephfs-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | python3-cephfs-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | python3-rados | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | python3-rados | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | python3-rados-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | python3-rados-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | python3-rbd | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | python3-rbd | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | python3-rbd-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | python3-rbd-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | python3-rgw | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | python3-rgw | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | python3-rgw-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | python3-rgw-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | rbd-fuse-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | rbd-fuse-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | rbd-mirror-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | rbd-mirror-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | rbd-nbd | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 7.1 | rbd-nbd | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | rbd-nbd-debuginfo | 2:18.2.1-381.el8cp |
| Red Hat ceph storage 7.1 | rbd-nbd-debuginfo | 2:18.2.1-381.el9cp |
| Red Hat ceph storage 8.1 | ceph | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | ceph-base | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | ceph-base-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | ceph-common | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | ceph-common-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | ceph-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | ceph-debugsource | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | ceph-exporter-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | ceph-fuse | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | ceph-fuse-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | ceph-immutable-object-cache | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | ceph-immutable-object-cache-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | ceph-mds-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | ceph-mgr-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | ceph-mib | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | ceph-mon-client-nvmeof-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | ceph-mon-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | ceph-osd-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | ceph-radosgw-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | ceph-resource-agents | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | ceph-selinux | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | ceph-test-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | cephadm | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | cephfs-mirror-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | cephfs-top | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | libcephfs-daemon-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | libcephfs-devel | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | libcephfs-proxy2 | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | libcephfs-proxy2-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | libcephfs2 | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | libcephfs2-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | libcephsqlite-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | librados-devel | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | librados-devel-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | librados2 | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | librados2-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | libradospp-devel | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | libradosstriper1 | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | libradosstriper1-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | librbd-devel | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | librbd1 | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | librbd1-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | librgw-devel | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | librgw2 | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | librgw2-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | python3-ceph-argparse | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | python3-ceph-common | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | python3-cephfs | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | python3-cephfs-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | python3-rados | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | python3-rados-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | python3-rbd | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | python3-rbd-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | python3-rgw | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | python3-rgw-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | rbd-fuse-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | rbd-mirror-debuginfo | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | rbd-nbd | 2:19.2.1-292.el9cp |
| Red Hat ceph storage 8.1 | rbd-nbd-debuginfo | 2:19.2.1-292.el9cp |
| Ubuntu 22.04 LTS | ceph | 17.2.9-0ubuntu0.22.04.2 |
| Ubuntu 24.04 LTS | ceph | 19.2.3-0ubuntu0.24.04.3 |
| Ubuntu 25.10 | ceph | 19.2.3-0ubuntu1.25.10.3 |
| Ubuntu Pro 14.04 LTS | ceph | 0.80.11-0ubuntu1.14.04.4+esm4 |
| Ubuntu Pro 16.04 LTS | ceph | 10.2.11-0ubuntu0.16.04.3+esm3 |
| Ubuntu Pro 18.04 LTS | ceph | 12.2.13-0ubuntu0.18.04.11+esm2 |
| Ubuntu Pro 20.04 LTS | ceph | 15.2.17-0ubuntu0.20.04.6+esm1 |