A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.
CVSS Details
- CVSS 3.1 Base Score: 6.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ceph16Upgrade ceph | Aug 22, 2024 | Apr 13, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 13, 2020 |
| Debian | — | Upgrade ceph | Jul 30, 2024 | Apr 13, 2020 |
| Freebsd | — | Upgrade ceph14 | Apr 30, 2020 | Apr 14, 2020 |
| Gentoo Linux | — | Upgrade sys-cluster/ceph. | May 28, 2021 | Apr 13, 2020 |
| Suse | — | Upgrade libcephfs2Upgrade ceph-radosgwUpgrade python3-ceph-commonUpgrade ceph-commonUpgrade libcephfs-develUpgrade ceph-mgrUpgrade ceph-mdsUpgrade ceph-grafana-dashboardsUpgrade cephfs-shellUpgrade ceph-monUpgrade python3-radosUpgrade librgw-develUpgrade python3-ceph-argparseUpgrade librados-develUpgrade ceph-mgr-sshUpgrade librbd1Upgrade libradosstriper1Upgrade ceph-mgr-diskprediction-localUpgrade ceph-testUpgrade python3-rbdUpgrade python3-cephfsUpgrade ceph-mgr-diskprediction-cloudUpgrade ceph-mgr-k8seventsUpgrade librbd-develUpgrade rbd-nbdUpgrade librados2Upgrade ceph-resource-agentsUpgrade ceph-fuseUpgrade libradospp-develUpgrade ceph-baseUpgrade ceph-osdUpgrade ceph-mgr-rookUpgrade librgw2Upgrade rbd-mirrorUpgrade rados-objclass-develUpgrade rbd-fuseUpgrade libradosstriper-develUpgrade ceph-mgr-dashboardUpgrade ceph-dashboard-e2eUpgrade cephUpgrade python3-rgwUpgrade ceph-prometheus-alerts | Apr 11, 2020 | Apr 7, 2020 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub