Red Hat Red Hat Ceph Storage 8
11 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-18495 | | Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough | MEDIUM 6.1 | 0.1 % | ||
| CVE-2025-12801 | | Nfs-utils: rpc.mountd in the nfs-utils privilege escalation | MEDIUM 6.5 | 0.5 % | ||
| CVE-2025-14831 | | Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification | MEDIUM 5.3 | 0.7 % | ||
| CVE-2025-9820 | | Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function | MEDIUM 4.0 | 0.2 % | ||
| CVE-2025-14874 | | Nodemailer: nodemailer: denial of service via crafted email address header | HIGH 7.5 | 0.6 % | ||
| CVE-2025-14104 | | Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames | MEDIUM 6.1 | 0.2 % | ||
| CVE-2025-14010 | | Ansible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose output | MEDIUM 5.5 | 0.2 % | ||
| CVE-2025-13601 | | Glib: integer overflow in in g_escape_uri_string() | HIGH 7.7 | 0.3 % | ||
| CVE-2025-11561 | | Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems | HIGH 8.8 | 0.8 % | ||
| CVE-2025-4598 | | Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump | MEDIUM 4.7 | 1.3 % | ||
| CVE-2024-11831 | | Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript | MEDIUM 5.4 | 1.1 % |