It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network can use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade librgw2-develUpgrade librados-develUpgrade nfs-ganesha-cephUpgrade cephmetrics-grafana-pluginsUpgrade python-rgwUpgrade ceph-radosgwUpgrade librbd-develUpgrade ceph-fuseUpgrade ceph-baseUpgrade cephmetrics-collectorsUpgrade libcephfs-develUpgrade cephmetrics-ansibleUpgrade libcephfs1-develUpgrade nfs-ganesha-debuginfoUpgrade libradosstriper1Upgrade ceph-selinuxUpgrade cephmetricsUpgrade ceph-ansibleUpgrade librgw-develUpgrade nfs-ganeshaUpgrade python-cephfsUpgrade ceph-debuginfoUpgrade librgw2Upgrade ceph-mdsUpgrade libcephfs2Upgrade ceph-commonUpgrade rbd-mirrorUpgrade libcephfs1Upgrade nfs-ganesha-rgw | Aug 28, 2019 | Jul 10, 2018 |
| Debian | — | Upgrade cephUpgrade linux | Nov 14, 2018 | Jul 10, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools | May 25, 2022 | Jul 10, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade perf | Nov 19, 2019 | Jul 10, 2018 |
| Redhat_linux | — | Upgrade libradosstriper1Upgrade ceph-ansibleUpgrade cephmetrics-ansibleUpgrade python-rgwUpgrade ceph-radosgwUpgrade nfs-ganesha-rgwUpgrade libcephfs1-develUpgrade cephmetricsUpgrade ceph-selinuxUpgrade ceph-mdsUpgrade librbd-develUpgrade librgw2No solution existsUpgrade nfs-ganesha-debuginfoUpgrade nfs-ganeshaUpgrade ceph-baseUpgrade librados-develUpgrade librgw-develUpgrade nfs-ganesha-cephUpgrade ceph-debuginfoUpgrade cephmetrics-grafana-pluginsUpgrade cephmetrics-collectorsUpgrade libcephfs-develUpgrade rbd-mirrorUpgrade libcephfs2Upgrade libcephfs1Upgrade ceph-commonUpgrade ceph-fuseUpgrade librgw2-develUpgrade python-cephfs | Jul 27, 2018 | Jul 10, 2018 |
| Suse | — | Upgrade python3-ceph-commonUpgrade kernel-default-manUpgrade ceph-commonUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade python3-cephfsUpgrade python3-ceph-argparseUpgrade librgw2Upgrade rados-objclass-develUpgrade python3-rbdUpgrade librbd-develUpgrade kernel-docsUpgrade python3-rgwUpgrade kernel-azure-baseUpgrade librbd1Upgrade python3-radosUpgrade libcephfs2Upgrade libradospp-develUpgrade librados2Upgrade librados-develUpgrade libcephfs-develUpgrade kernel-defaultUpgrade rbd-nbdUpgrade kernel-obs-buildUpgrade librgw-develUpgrade kernel-docs-azureUpgrade kernel-source-azure | Aug 4, 2018 | Jul 10, 2018 |
| Ubuntu | — | No solution exists | Jan 29, 2021 | Jul 10, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 10, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub