There are packages installed that are affected by a vulnerability referenced in the following CVE:

  CVE-2024-31884


The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8045-1 advisory.

    Martin Schobert discovered that Ceph did not properly verify SSL certificates when using Pybind for secure     mail connections, which could result in accepting invalid certificates. An attacker could possibly use     this issue to perform an intermediary attack and access mail server credentials or message contents. This     issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 25.10.
    (CVE-2024-31884)

    It was discovered that Ceph's RADOS Gateway (RGW) did not properly handle certain header parameters. An     attacker could possibly use this issue to cause the RGW service to crash, leading to a denial of service.
    (CVE-2024-47866)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2711 advisory.

    Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable     version of the Ceph storage system with a Ceph management platform, deployment utilities, and support     services.

    These new packages include numerous security updates, bug fixes, and a known issue. Space precludes     documenting all of these changes in this advisory. Users are directed to the Red Hat Ceph Storage Release     Notes for information on the most significant of these changes:

    https://docs.redhat.com/en/documentation/red_hat_ceph_storage/8/html/8.1_release_notes

    ==========================================     IMPORTANT:
    The Red Hat Ceph Storage team has migrated our defect tracking from Bugzilla to an internal Jira system.
    Bug fixes and CVE information that was previously listed in the errata releases are now listed in the     Release Notes.

    During the migration period, some defect details might still appear temporarily in the Errata. However,     the release notes contain the most current and authoritative information, including the complete list of     fixes and security updates.

    Refer to the release notes going forward for the latest and most accurate fix and CVE information.
    ==========================================

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1536 advisory.

    Red Hat Ceph Storage is a scalable, open, software-defined storage platform     that combines the most stable version of the Ceph storage system with a     Ceph management platform, deployment utilities, and support services.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4482 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4482-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                           Chris Lamb     February 17, 2026                             https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : ceph     Version        : 14.2.21-1+deb11u3     CVE ID         : CVE-2024-31884     Debian Bug     : 1126573

    It was discovered that there was an issue in Ceph, the distributed     storage and file system, where the Python bindings did not correctly     implement SSL certificate checking.

    For Debian 11 bullseye, this problem has been fixed in version     14.2.21-1+deb11u3.

    We recommend that you upgrade your ceph packages.

    For the detailed security status of ceph please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/ceph

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6321 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6321-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     June 03, 2026                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : ceph     CVE ID         : CVE-2024-31884 CVE-2024-47866 CVE-2025-52555     Debian Bug     : 1108410 1120797 1126573

    Multiple vulnerabilities were discovered in Ceph, a distributed storage     and file system, which may result in privilege escalation, denial of     service or information disclosure.

    For the oldstable distribution (bookworm), these problems have been fixed     in version 16.2.15+ds-0+deb12u2.

    For the stable distribution (trixie), these problems have been fixed in     version 18.2.7+ds-1+deb13u1.

    We recommend that you upgrade your ceph packages.

    For the detailed security status of ceph please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/ceph

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0534 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-31884:
    A flaw was found in Ceph. An attacker can allow Ceph to accept any certificate because no certificate     context is passed via Pybind to the constructors imaplib.IMAP4_SSL or smtplib.SMTP_SSL. As a result,     pybind pybind does not check the server's X.509 certificate, instead accepting any certificate. This     enables an attacker to commit a Man In the Middle (MITM) attack, compromising mail server credentials or     mail contents

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2769 advisory.

    Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable     version of the Ceph storage system with a Ceph management platform, deployment utilities, and support     services.

    These new packages include numerous security and bug fixes. Space precludes documenting all of these     changes in this advisory. Users are directed to the Red Hat Ceph Storage Release Notes for information on     the most significant of these changes:

    https://docs.redhat.com/en/documentation/red_hat_ceph_storage/7/html/7.1_release_notes

    ==========================================     IMPORTANT:
    The Red Hat Ceph Storage team has migrated our defect tracking from Bugzilla to an internal Jira system.
    Bug fixes and CVE information that was previously listed in the errata releases are now listed in the     Release Notes.

    During the migration period, some defect details might still appear temporarily in the Errata. However,     the release notes contain the most current and authoritative information, including the complete list of     fixes and security updates.

    Refer to the release notes going forward for the latest and most accurate fix and CVE information.
    ==========================================

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
463032	Echo: ceph: security update to 19.2.3+e4	Tenable Cloud Security	Echo Local Security Checks	10/2/2026	10/2/2026	medium
463032	Echo: ceph: security update to 19.2.3+e4	Tenable Self-Hosted Container Security	Echo Local Security Checks	10/2/2026	10/2/2026	medium
300485	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 : Ceph vulnerabilities (USN-8045-1)	Nessus	Ubuntu Local Security Checks	3/4/2026	3/4/2026	high
299162	RHEL 9 : Red Hat Ceph Storage 8.1 (RHSA-2026:2711)	Nessus	Red Hat Local Security Checks	2/16/2026	2/17/2026	high
297118	RHEL 10 / 9 : Red Hat Ceph Storage 9.0 Security and Enhancement update (Moderate) (RHSA-2026:1536)	Nessus	Red Hat Local Security Checks	1/29/2026	1/29/2026	high
299356	Debian dla-4482 : ceph - security update	Nessus	Debian Local Security Checks	2/18/2026	2/18/2026	medium
318559	Debian dsa-6321 : ceph - security update	Nessus	Debian Local Security Checks	6/3/2026	6/3/2026	medium
325855	TencentOS Server 4: ceph (TSSA-2026:0534)	Nessus	Tencent Local Security Checks	7/9/2026	7/9/2026	medium
299273	RHEL 8 / 9 : Red Hat Ceph Storage 7.1 (RHSA-2026:2769)	Nessus	Red Hat Local Security Checks	2/17/2026	2/17/2026	high

Detections

Analytics

Plugins Search

medium

medium

high

high

high

medium

medium

medium

high