Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Desktop 12 SP4 package ceph, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (3)
CVE-2018-16846 — CVSS 6.5 (medium): It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket…
CVE-2018-14662 — CVSS 5.7 (medium): It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used…
CVE-2018-16889 — CVSS 5.5 (medium): Ceph does not properly sanitize encryption keys in debug logging for v4 auth. This results in the leaking of encryption key information in…