It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption.
CVSS Details
- CVSS 3.1 Base Score: 5.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
- CVSS 3.0 Base Score: 3.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nfs-ganesha-debuginfoUpgrade python-cephfsUpgrade cephmetrics-ansibleUpgrade rbd-mirrorUpgrade ceph-fuseUpgrade librbd-develUpgrade libcephfs-develUpgrade ceph-mdsUpgrade python2-cryptoUpgrade libntirpcUpgrade ceph-commonUpgrade ceph-iscsi-configUpgrade ceph-debuginfoUpgrade librados-develUpgrade python-crypto-debuginfoUpgrade ceph-radosgwUpgrade ceph-selinuxUpgrade libradosstriper1Upgrade nfs-ganesha-rgwUpgrade python-rgwUpgrade libntirpc-debuginfoUpgrade nfs-ganeshaUpgrade nfs-ganesha-cephUpgrade libcephfs2Upgrade librgw2Upgrade librgw-develUpgrade ceph-ansibleUpgrade ceph-base | Mar 5, 2020 | Jan 15, 2019 |
| Debian | — | Upgrade ceph | Mar 12, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-radosUpgrade librados2Upgrade python-rbdUpgrade librbd1 | Mar 24, 2020 | Jan 15, 2019 |
| Redhat_linux | — | Upgrade nfs-ganesha-debuginfoUpgrade libntirpcUpgrade ceph-debuginfoUpgrade libcephfs-develUpgrade python2-cryptoUpgrade rbd-mirrorUpgrade nfs-ganesha-cephUpgrade librgw-develUpgrade ceph-baseUpgrade nfs-ganeshaUpgrade libcephfs2Upgrade librados-develUpgrade libntirpc-debuginfoUpgrade ceph-mdsUpgrade libradosstriper1Upgrade ceph-iscsi-configUpgrade ceph-radosgwUpgrade librgw2Upgrade ceph-fuseUpgrade ceph-ansibleUpgrade ceph-selinuxUpgrade ceph-commonUpgrade python-crypto-debuginfoUpgrade python-rgwUpgrade cephmetrics-ansibleUpgrade librbd-develUpgrade python-cephfsUpgrade nfs-ganesha-rgw | Mar 5, 2020 | Jan 15, 2019 |
| Suse | — | Upgrade libradosstriper-develUpgrade ceph-commonUpgrade python3-cephfsUpgrade librgw-develUpgrade python3-rbdUpgrade librgw2Upgrade ceph-baseUpgrade python-rbdUpgrade libcephfs2Upgrade rbd-mirrorUpgrade ceph-resource-agentsUpgrade librados-develUpgrade ceph-mgrUpgrade python3-rgwUpgrade ceph-mdsUpgrade ceph-osdUpgrade librbd-develUpgrade rados-objclass-develUpgrade libcephfs-develUpgrade ceph-fuseUpgrade ceph-radosgwUpgrade rbd-nbdUpgrade python-cephfsUpgrade librados2Upgrade python-rgwUpgrade librbd1Upgrade rbd-fuseUpgrade cephUpgrade python3-radosUpgrade libradosstriper1Upgrade ceph-monUpgrade python-radosUpgrade ceph-test | Feb 27, 2019 | Jan 15, 2019 |
| Ubuntu | — | Upgrade ceph-commonUpgrade ceph-common (Ubuntu Pro)Upgrade cephUpgrade radosgw (Ubuntu Pro)Upgrade ceph (Ubuntu Pro) | Jun 25, 2019 | Jan 15, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub