A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.
CVSS Details
- CVSS 3.1 Base Score: 6.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ceph16Upgrade ceph | Aug 22, 2024 | Apr 13, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 13, 2020 |
| Debian | — | Upgrade ceph | Jul 30, 2024 | Apr 13, 2020 |
| Freebsd | — | Upgrade ceph14 | Apr 30, 2020 | Apr 14, 2020 |
| Gentoo Linux | — | Upgrade sys-cluster/ceph. | May 28, 2021 | Apr 13, 2020 |
| Suse | — | Upgrade python3-cephfsUpgrade ceph-osdUpgrade libradospp-develUpgrade ceph-mgr-rookUpgrade ceph-resource-agentsUpgrade ceph-prometheus-alertsUpgrade librgw2Upgrade librados2Upgrade ceph-mgr-diskprediction-localUpgrade ceph-testUpgrade python3-rbdUpgrade python3-rgwUpgrade rbd-nbdUpgrade ceph-dashboard-e2eUpgrade ceph-mgr-k8seventsUpgrade rbd-mirrorUpgrade libradosstriper-develUpgrade ceph-mgr-dashboardUpgrade librbd-develUpgrade cephUpgrade ceph-fuseUpgrade rados-objclass-develUpgrade ceph-baseUpgrade libradosstriper1Upgrade ceph-mgr-diskprediction-cloudUpgrade rbd-fuseUpgrade cephfs-shellUpgrade python3-ceph-commonUpgrade ceph-commonUpgrade ceph-mgr-sshUpgrade ceph-grafana-dashboardsUpgrade ceph-mdsUpgrade librados-develUpgrade ceph-monUpgrade librgw-develUpgrade libcephfs2Upgrade python3-radosUpgrade ceph-radosgwUpgrade ceph-mgrUpgrade libcephfs-develUpgrade librbd1Upgrade python3-ceph-argparse | Apr 11, 2020 | Apr 7, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub