CVE-2021-3531

A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a GET Request for a swift URL that ends with two slashes it can cause the rgw to crash, resulting in a denial of service. The greatest threat to the system is of availability.

• CWE-20
• CWE-617

• http://www.openwall.com/lists/oss-security/2021/05/14/5Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2021/05/17/7Mailing List, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1955326Issue Tracking, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FX5ZHI5L7FOHXOSEV3TYBAL66DMLJ7V5/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LPCJN2YDZCBMF4FOJXSTAADKFGEQEO7O/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZRUNDH2TJRZRWL3DCH2PQ6KROWTPQ7AJ/
• http://www.openwall.com/lists/oss-security/2021/05/14/5Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2021/05/17/7Mailing List, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1955326Issue Tracking, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FX5ZHI5L7FOHXOSEV3TYBAL66DMLJ7V5/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LPCJN2YDZCBMF4FOJXSTAADKFGEQEO7O/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZRUNDH2TJRZRWL3DCH2PQ6KROWTPQ7AJ/

Published

May 18, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-35301Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows …5.3
• CVE-2021-35302Incorrect Access Control for linked Tickets in Zammad 1.0.x …5.3
• CVE-2021-35303Cross Site Scripting (XSS) in Zammad 1.0.x up to 4.0.0 allow…6.1
• CVE-2021-35306An issue was discovered in Bento4 through v1.6.0-636. A NULL…6.5
• CVE-2021-35307An issue was discovered in Bento4 through v1.6.0-636. A NULL…6.5
• CVE-2021-35309An issue discovered in Samsung SyncThru Web Service SPL 5.93…7.5
• CVE-2021-35312A vulnerability was found in CIR 2000 / Gestionale Amica Pro…7.8
• CVE-2021-35313Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-3532Rejected reason: This CVE is marked as INVALID and not a bug
• CVE-2021-35323Cross Site Scripting (XSS) vulnerability exists in bludit 3-…6.1
• CVE-2021-35324A vulnerability in the Form_Login function of TOTOLINK A720R…9.8
• CVE-2021-35325A stack overflow in the checkLoginUser function of TOTOLINK …7.5