A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged information.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python3-rgw-debuginfoUpgrade python3-rbd-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade rbd-nbdUpgrade ceph-base-debuginfoUpgrade ceph-osd-debuginfoUpgrade rbd-mirror-debuginfoUpgrade python3-rgwUpgrade ceph-mgr-debuginfoUpgrade python3-cephfs-debuginfoUpgrade ceph-baseUpgrade ceph-selinuxUpgrade ceph-mibUpgrade ceph-mon-debuginfoUpgrade rbd-nbd-debuginfoUpgrade rbd-mirrorUpgrade ceph-mds-debuginfoUpgrade libradosstriper1Upgrade ceph-resource-agentsUpgrade python3-rbdUpgrade ceph-test-debuginfoUpgrade libradospp-develUpgrade libradosstriper1-debuginfoUpgrade cephadm-ansibleUpgrade ceph-immutable-object-cacheUpgrade cephfs-mirrorUpgrade cephadmUpgrade ceph-commonUpgrade libcephsqlite-debuginfoUpgrade librados-devel-debuginfoUpgrade ceph-debugsourceUpgrade libcephfs2Upgrade librbd-develUpgrade cephfs-mirror-debuginfoUpgrade ceph-radosgwUpgrade python3-rados-debuginfoUpgrade cephfs-topUpgrade librados-develUpgrade librgw2Upgrade ceph-mdsUpgrade python3-ceph-argparseUpgrade librgw2-debuginfoUpgrade librgw-develUpgrade libcephfs-develUpgrade ceph-common-debuginfoUpgrade rbd-fuse-debuginfoUpgrade python3-radosUpgrade python3-cephfsUpgrade ceph-fuse-debuginfoUpgrade ceph-fuseUpgrade python3-ceph-commonUpgrade ceph-immutable-object-cache-debuginfoUpgrade ceph-grafana-dashboardsUpgrade libcephfs2-debuginfo | Mar 1, 2023 | Jan 17, 2023 |
| Debian | — | Upgrade ceph | Jul 30, 2024 | Jan 17, 2023 |
| Gentoo Linux | — | Upgrade sys-cluster/ceph. | Dec 27, 2023 | Jan 17, 2023 |
| Redhat_linux | — | Upgrade libcephfs2Upgrade ceph-commonUpgrade ceph-immutable-object-cache-debuginfoUpgrade librados-devel-debuginfoUpgrade rbd-nbd-debuginfoUpgrade ceph-mds-debuginfoUpgrade librados-develUpgrade python3-cephfs-debuginfoUpgrade python3-rgwUpgrade rbd-fuse-debuginfoUpgrade libcephsqlite-debuginfoUpgrade libcephfs2-debuginfoUpgrade python3-ceph-commonUpgrade libcephfs-develUpgrade python3-cephfsUpgrade ceph-debugsourceUpgrade ceph-mdsUpgrade python3-radosUpgrade cephfs-mirrorUpgrade ceph-grafana-dashboardsUpgrade ceph-radosgwUpgrade librgw-develUpgrade ceph-fuse-debuginfoUpgrade python3-rados-debuginfoUpgrade ceph-fuseUpgrade ceph-base-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade ceph-mibUpgrade librbd-develUpgrade ceph-resource-agentsUpgrade ceph-mgr-debuginfoUpgrade libradosstriper1Upgrade cephadmUpgrade ceph-mon-debuginfoUpgrade libradospp-develUpgrade librgw2-debuginfoUpgrade ceph-osd-debuginfoUpgrade ceph-common-debuginfoUpgrade python3-rgw-debuginfoUpgrade ceph-baseUpgrade libradosstriper1-debuginfoUpgrade rbd-mirrorUpgrade librgw2Upgrade ceph-test-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade python3-rbd-debuginfoUpgrade python3-ceph-argparseUpgrade rbd-mirror-debuginfoUpgrade rbd-nbdUpgrade cephadm-ansibleUpgrade cephfs-topUpgrade python3-rbdUpgrade ceph-immutable-object-cacheUpgrade ceph-selinux | Mar 1, 2023 | Jan 17, 2023 |
| Suse | — | Upgrade ceph-mgr-rookUpgrade ceph-osdUpgrade rbd-mirrorUpgrade rbd-nbdUpgrade ceph-mgr-cephadmUpgrade ceph-baseUpgrade ceph-testUpgrade ceph-prometheus-alertsUpgrade cephfs-topUpgrade ceph-mgrUpgrade ceph-mgr-modules-coreUpgrade python3-rbdUpgrade libradospp-develUpgrade libcephsqlite-develUpgrade python3-rgwUpgrade rados-objclass-develUpgrade cephUpgrade ceph-mgr-k8seventsUpgrade ceph-mgr-diskprediction-localUpgrade ceph-fuseUpgrade librbd1Upgrade ceph-grafana-dashboardsUpgrade cephfs-shellUpgrade python3-radosUpgrade ceph-immutable-object-cacheUpgrade cephfs-mirrorUpgrade libcephfs-develUpgrade librados-develUpgrade ceph-monUpgrade rbd-fuseUpgrade python3-ceph-commonUpgrade ceph-radosgwUpgrade librados2Upgrade python3-ceph-argparseUpgrade ceph-mgr-dashboardUpgrade ceph-commonUpgrade python3-cephfsUpgrade librgw2Upgrade librgw-develUpgrade ceph-mdsUpgrade cephadmUpgrade libcephsqliteUpgrade libcephfs2Upgrade librbd-devel | Mar 28, 2023 | Jan 17, 2023 |
| Ubuntu | — | Upgrade cephUpgrade ceph-commonUpgrade ceph-base | May 10, 2023 | Jan 17, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub