A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nfs-ganesha-cephUpgrade cephadm-ansibleUpgrade python3-rgwUpgrade ceph-mgr-debuginfoUpgrade libtcmuUpgrade rbd-nbd-debuginfoUpgrade rbd-mirror-debuginfoUpgrade ceph-selinuxUpgrade nfs-ganesha-ceph-debuginfoUpgrade ceph-osd-debuginfoUpgrade ceph-test-debuginfoUpgrade nfs-ganeshaUpgrade ceph-mon-debuginfoUpgrade nfs-ganesha-rados-graceUpgrade ceph-base-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade nfs-ganesha-vfsUpgrade python3-cephfs-debuginfoUpgrade ceph-resource-agentsUpgrade nfs-ganesha-rados-urlsUpgrade libradospp-develUpgrade cephadmUpgrade ceph-mds-debuginfoUpgrade libntirpc-debuginfoUpgrade ceph-baseUpgrade python3-rbd-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade libradosstriper1Upgrade ceph-immutable-object-cacheUpgrade libcephfs2Upgrade python3-rgw-debuginfoUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade ceph-iscsiUpgrade ceph-fuseUpgrade python-ceph-argparseUpgrade librgw2-debuginfoUpgrade nfs-ganesha-vfs-debuginfoUpgrade nfs-ganesha-selinuxUpgrade librgw-develUpgrade libcephfs-develUpgrade python-rgwUpgrade libcephsqlite-debuginfoUpgrade librados-develUpgrade ceph-immutable-object-cache-debuginfoUpgrade cephfs-mirrorUpgrade librbd-develUpgrade python3-radosUpgrade python3-cephfsUpgrade librgw2Upgrade ceph-debuginfoUpgrade ceph-debugsourceUpgrade rbd-nbdUpgrade nfs-ganesha-debugsourceUpgrade nfs-ganesha-proxyUpgrade python-cephfsUpgrade nfs-ganesha-rgw-debuginfoUpgrade libradosstriper1-debuginfoUpgrade librados-devel-debuginfoUpgrade libcephfs2-debuginfoUpgrade ceph-grafana-dashboardsUpgrade tcmu-runnerUpgrade nfs-ganesha-debuginfoUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade libntirpcUpgrade cephfs-topUpgrade ceph-mdsUpgrade ceph-ansibleUpgrade ceph-radosgwUpgrade libntirpc-debugsourceUpgrade ceph-fuse-debuginfoUpgrade ceph-common-debuginfoUpgrade ceph-commonUpgrade nfs-ganesha-rgwUpgrade python3-rados-debuginfoUpgrade rbd-mirrorUpgrade python3-rbdUpgrade rbd-fuse-debuginfoUpgrade python3-ceph-argparseUpgrade nfs-ganesha-proxy-debuginfoUpgrade python3-ceph-common | Apr 5, 2022 | Apr 4, 2022 |
| Debian | — | Upgrade ceph | Oct 25, 2023 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade librados2Upgrade python-radosUpgrade librbd1Upgrade python-rbd | Feb 9, 2023 | Aug 25, 2022 |
| Redhat_linux | — | Upgrade ceph-immutable-object-cacheUpgrade rbd-fuse-debuginfoUpgrade nfs-ganesha-rados-graceUpgrade ceph-selinuxUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade rbd-mirrorUpgrade ceph-iscsiUpgrade ceph-commonUpgrade python-rgwUpgrade ceph-ansibleUpgrade ceph-mon-debuginfoUpgrade ceph-debuginfoUpgrade python-ceph-argparseUpgrade nfs-ganesha-ceph-debuginfoUpgrade nfs-ganesha-rados-urlsUpgrade tcmu-runnerUpgrade cephfs-mirror-debuginfoUpgrade ceph-mds-debuginfoUpgrade python3-radosUpgrade rbd-mirror-debuginfoUpgrade ceph-test-debuginfoUpgrade ceph-radosgwUpgrade cephfs-topUpgrade python-cephfsUpgrade rbd-nbdUpgrade nfs-ganesha-selinuxUpgrade nfs-ganesha-vfs-debuginfoUpgrade librgw2Upgrade cephadmUpgrade libntirpcUpgrade python3-ceph-commonUpgrade nfs-ganesha-proxyUpgrade librados-devel-debuginfoUpgrade ceph-common-debuginfoUpgrade libntirpc-debugsourceUpgrade ceph-osd-debuginfoUpgrade libradosstriper1Upgrade ceph-fuseUpgrade librbd-develUpgrade python3-rbd-debuginfoUpgrade libcephfs-develUpgrade nfs-ganesha-rgw-debuginfoUpgrade python3-rgw-debuginfoUpgrade ceph-base-debuginfoUpgrade nfs-ganesha-rgwUpgrade librgw2-debuginfoUpgrade ceph-baseUpgrade python3-rbdUpgrade ceph-mdsUpgrade ceph-fuse-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade libntirpc-debuginfoUpgrade librados-develUpgrade nfs-ganesha-cephUpgrade rbd-nbd-debuginfoUpgrade cephfs-mirrorUpgrade ceph-radosgw-debuginfoUpgrade libradospp-develUpgrade nfs-ganeshaUpgrade libcephfs2Upgrade python3-cephfsUpgrade nfs-ganesha-debugsourceUpgrade python3-ceph-argparseUpgrade python3-rados-debuginfoUpgrade librgw-develUpgrade ceph-mgr-debuginfoUpgrade libcephfs2-debuginfoUpgrade libradosstriper1-debuginfoUpgrade ceph-debugsourceUpgrade ceph-resource-agentsUpgrade libtcmuUpgrade ceph-immutable-object-cache-debuginfoUpgrade python3-rgwUpgrade libcephsqlite-debuginfoUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade cephadm-ansibleUpgrade ceph-grafana-dashboardsUpgrade python3-cephfs-debuginfoUpgrade nfs-ganesha-proxy-debuginfoUpgrade nfs-ganesha-vfs | Apr 5, 2022 | Apr 4, 2022 |
| Suse | — | Upgrade ceph-mgr-rookUpgrade cephadmUpgrade ceph-mgrUpgrade rados-objclass-develUpgrade librados2Upgrade ceph-immutable-object-cacheUpgrade cephfs-mirrorUpgrade ceph-mgr-k8seventsUpgrade libcephsqlite-develUpgrade ceph-osdUpgrade libcephfs2Upgrade cephfs-topUpgrade rbd-fuseUpgrade librgw-develUpgrade ceph-radosgwUpgrade python3-ceph-commonUpgrade librbd-develUpgrade ceph-grafana-dashboardsUpgrade ceph-fuseUpgrade python3-rgwUpgrade libfmt8Upgrade cephfs-shellUpgrade librbd1Upgrade ceph-mgr-dashboardUpgrade rbd-mirrorUpgrade cephUpgrade python3-radosUpgrade ceph-mdsUpgrade ceph-mgr-cephadmUpgrade python3-cephfsUpgrade librgw2Upgrade librados-develUpgrade ceph-baseUpgrade libcephfs-develUpgrade ceph-monUpgrade ceph-prometheus-alertsUpgrade ceph-commonUpgrade rbd-nbdUpgrade ceph-mgr-diskprediction-localUpgrade ceph-testUpgrade libcephsqliteUpgrade libradospp-develUpgrade python3-rbdUpgrade ceph-mgr-modules-coreUpgrade python3-ceph-argparse | Oct 26, 2022 | Aug 25, 2022 |
| Ubuntu | — | Upgrade ceph-commonUpgrade cephUpgrade ceph-base | May 10, 2023 | Aug 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub