Redhat Openshift Container Storage vulnerabilities
3 vulnerabilities
Known vulnerabilities in Redhat Openshift Container Storage, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-4048debianlapack+44
EPSS score2.76%
An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.CVE-2021-3979debianceph+25EPSS score0.60%
A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.CVE-2020-1700chainguardceph-18+16EPSS score2.42%
A flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects. An authenticated attacker can abuse this flaw by making multiple disconnect attempts resulting in a permanent leak of a socket connection by radosgw. This flaw could lead to a denial of service condition by pile up of CLOSE_WAIT sockets, eventually leading to the exhaustion of available resources, preventing legitimate users from connecting to the system.