A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libcephfs-develUpgrade cephmetrics-ansibleUpgrade ceph-ansibleUpgrade ceph-mdsUpgrade libradosstriper1Upgrade python-rgwUpgrade ceph-fuseUpgrade cephmetrics-collectorsUpgrade librbd-develUpgrade cephmetricsUpgrade librgw2Upgrade ceph-radosgwUpgrade ceph-commonUpgrade ceph-selinuxUpgrade rbd-mirrorUpgrade cephmetrics-grafana-pluginsUpgrade nfs-ganeshaUpgrade ceph-baseUpgrade librgw-develUpgrade libcephfs1-develUpgrade python-cephfsUpgrade nfs-ganesha-debuginfoUpgrade libcephfs2Upgrade ceph-debuginfoUpgrade librados-develUpgrade libcephfs1Upgrade librgw2-develUpgrade nfs-ganesha-cephUpgrade nfs-ganesha-rgw | Aug 28, 2019 | Jul 10, 2018 |
| Debian | — | Upgrade ceph | Nov 14, 2018 | Jul 10, 2018 |
| Redhat_linux | — | Upgrade ceph-selinuxUpgrade libradosstriper1Upgrade cephmetrics-ansibleUpgrade librbd-develUpgrade nfs-ganeshaUpgrade python-rgwUpgrade ceph-mdsUpgrade cephmetrics-grafana-pluginsUpgrade ceph-radosgwUpgrade ceph-ansibleUpgrade nfs-ganesha-rgwUpgrade nfs-ganesha-cephUpgrade librgw2Upgrade ceph-debuginfoUpgrade libcephfs1Upgrade libcephfs2Upgrade libcephfs1-develUpgrade ceph-commonUpgrade python-cephfsUpgrade cephmetrics-collectorsUpgrade nfs-ganesha-debuginfoUpgrade librgw-develUpgrade rbd-mirrorUpgrade librados-develUpgrade ceph-baseUpgrade ceph-fuseUpgrade librgw2-develUpgrade cephmetricsUpgrade libcephfs-devel | Jul 27, 2018 | Jul 10, 2018 |
| Suse | — | Upgrade librados-develUpgrade librgw-develUpgrade librbd1Upgrade python3-radosUpgrade python-cephfsUpgrade ceph-commonUpgrade python-rbdUpgrade ceph-baseUpgrade rbd-nbdUpgrade libcephfs-develUpgrade libcephfs2Upgrade ceph-monUpgrade ceph-mgrUpgrade libradosstriper-develUpgrade rbd-mirrorUpgrade python3-ceph-commonUpgrade ceph-osdUpgrade rados-objclass-develUpgrade ceph-resource-agentsUpgrade python3-cephfsUpgrade librbd-develUpgrade libradospp-develUpgrade librgw2Upgrade python3-ceph-argparseUpgrade ceph-testUpgrade python3-rbdUpgrade python-rgwUpgrade python3-rgwUpgrade rbd-fuseUpgrade cephUpgrade python-radosUpgrade ceph-radosgwUpgrade ceph-fuseUpgrade librados2Upgrade ceph-mdsUpgrade libradosstriper1 | Aug 4, 2018 | Jul 10, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jul 10, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 10, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub