https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 06:52:40 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-11089 bdu:2025-11089 https://cve.radiocsirt.org/vuln/bdu:2025-11089 https://cve.radiocsirt.org/vuln/bit-ceph-2025-52555 <p><strong>Affected:</strong> Bitnami: ceph</p> <p>Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 through 19.2.2, an unprivileged user can escalate to root privileges in a ceph-fuse mounted CephFS by chmod 777 a directory owned by root to gain access. The result of this is that a user could read, write and execute to any directory owned by root as long as they chmod 777 it. This impacts confidentiality, integrity, and availability. It is patched in versions 17.2.8, 18.2.5, and 19.2.3.</p> <p><strong>Affected:</strong> Bitnami: ceph</p> <p>Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 through 19.2.2, an unprivileged user can escalate to root privileges in a ceph-fuse mounted CephFS by chmod 777 a directory owned by root to gain access. The result of this is that a user could read, write and execute to any directory owned by root as long as they chmod 777 it. This impacts confidentiality, integrity, and availability. It is patched in versions 17.2.8, 18.2.5, and 19.2.3.</p> https://cve.radiocsirt.org/vuln/bit-ceph-2025-52555 https://cve.radiocsirt.org/vuln/euvd-2026-257539 EUVD-2026-257539 https://cve.radiocsirt.org/vuln/euvd-2026-257539 https://cve.radiocsirt.org/vuln/fkie_cve-2025-52555 <p>Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 through 19.2.2, an unprivileged user can escalate to root privileges in a ceph-fuse mounted CephFS by chmod 777 a directory owned by root to gain access. The result of this is that a user could read, write and execute to any directory owned by root as long as they chmod 777 it. This impacts confidentiality, integrity, and availability. It is patched in versions 17.2.8, 18.2.5, and 19.2.3.</p> <p>Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 through 19.2.2, an unprivileged user can escalate to root privileges in a ceph-fuse mounted CephFS by chmod 777 a directory owned by root to gain access. The result of this is that a user could read, write and execute to any directory owned by root as long as they chmod 777 it. This impacts confidentiality, integrity, and availability. It is patched in versions 17.2.8, 18.2.5, and 19.2.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-52555 https://cve.radiocsirt.org/vuln/msrc_cve-2025-52555 msrc_CVE-2025-52555 https://cve.radiocsirt.org/vuln/msrc_cve-2025-52555 https://cve.radiocsirt.org/vuln/oesa-2025-1838 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: ceph</p> <p>Ceph is a massively scalable, open-source, distributed storage system that runs on commodity hardware and delivers object, block and file system storage. Security Fix(es):</p> <p>Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 through 19.2.2, an unprivileged user can escalate to root privileges in a ceph-fuse mounted CephFS by chmod 777 a directory owned by root to gain access. The result of this is that a user could read, write and execute to any directory owned by root as long as they chmod 777 it. This impacts confidentiality, integrity, and availability. It is patched in versions 17.2.8, 18.2.5, and 19.2.3.(CVE-2025-52555)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: ceph</p> <p>Ceph is a massively scalable, open-source, distributed storage system that runs on commodity hardware and delivers object, block and file system storage. Security Fix(es):</p> <p>Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 through 19.2.2, an unprivileged user can escalate to root privileges in a ceph-fuse mounted CephFS by chmod 777 a directory owned by root to gain access. The result of this is that a user could read, write and execute to any directory owned by root as long as they chmod 777 it. This impacts confidentiality, integrity, and availability. It is patched in versions 17.2.8, 18.2.5, and 19.2.3.(CVE-2025-52555)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1838 https://cve.radiocsirt.org/vuln/rhsa-2026:1536 <p>containerd: OCI image importer memory exhaustion npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript pybind: Improper use of Pybind golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing ceph: privilege escalation by unprivileged users in a ceph-fuse mounted CephFS</p> <p>containerd: OCI image importer memory exhaustion npm-serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript pybind: Improper use of Pybind golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing ceph: privilege escalation by unprivileged users in a ceph-fuse mounted CephFS</p> https://cve.radiocsirt.org/vuln/rhsa-2026:1536 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-52555 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: ceph, Ubuntu:Pro:16.04:LTS: ceph, Ubuntu:Pro:18.04:LTS: ceph, Ubuntu:20.04:LTS: ceph</p> <p>Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 through 19.2.2, an unprivileged user can escalate to root privileges in a ceph-fuse mounted CephFS by chmod 777 a directory owned by root to gain access. The result of this is that a user could read, write and execute to any directory owned by root as long as they chmod 777 it. This impacts confidentiality, integrity, and availability. It is patched in versions 17.2.8, 18.2.5, and 19.2.3.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: ceph, Ubuntu:Pro:16.04:LTS: ceph, Ubuntu:Pro:18.04:LTS: ceph, Ubuntu:20.04:LTS: ceph</p> <p>Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 through 19.2.2, an unprivileged user can escalate to root privileges in a ceph-fuse mounted CephFS by chmod 777 a directory owned by root to gain access. The result of this is that a user could read, write and execute to any directory owned by root as long as they chmod 777 it. This impacts confidentiality, integrity, and availability. It is patched in versions 17.2.8, 18.2.5, and 19.2.3.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-52555