A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade librgw2Upgrade python-rgwUpgrade ceph-radosgwUpgrade librbd-develUpgrade ceph-mdsUpgrade ceph-ansibleUpgrade libcephfs-develUpgrade cephmetricsUpgrade libradosstriper1Upgrade cephmetrics-collectorsUpgrade ceph-commonUpgrade ceph-fuseUpgrade ceph-selinuxUpgrade cephmetrics-ansibleUpgrade ceph-debuginfoUpgrade rbd-mirrorUpgrade nfs-ganesha-rgwUpgrade libcephfs1-develUpgrade nfs-ganesha-cephUpgrade librados-develUpgrade libcephfs2Upgrade cephmetrics-grafana-pluginsUpgrade python-cephfsUpgrade librgw-develUpgrade librgw2-develUpgrade ceph-baseUpgrade nfs-ganesha-debuginfoUpgrade libcephfs1Upgrade nfs-ganesha | Aug 28, 2019 | Jul 10, 2018 |
| Debian | — | Upgrade ceph | Nov 14, 2018 | Jul 10, 2018 |
| Redhat_linux | — | Upgrade nfs-ganesha-rgwUpgrade libradosstriper1Upgrade ceph-selinuxUpgrade nfs-ganesha-cephUpgrade ceph-radosgwUpgrade cephmetrics-ansibleUpgrade python-rgwUpgrade librbd-develUpgrade nfs-ganeshaUpgrade ceph-ansibleUpgrade cephmetrics-grafana-pluginsUpgrade ceph-mdsUpgrade librgw2Upgrade librados-develUpgrade libcephfs1Upgrade libcephfs1-develUpgrade ceph-debuginfoUpgrade ceph-commonUpgrade libcephfs-develUpgrade ceph-fuseUpgrade cephmetrics-collectorsUpgrade rbd-mirrorUpgrade librgw2-develUpgrade libcephfs2Upgrade cephmetricsUpgrade ceph-baseUpgrade python-cephfsUpgrade librgw-develUpgrade nfs-ganesha-debuginfo | Jul 27, 2018 | Jul 10, 2018 |
| Suse | — | Upgrade python-cephfsUpgrade ceph-baseUpgrade rbd-nbdUpgrade ceph-commonUpgrade libcephfs-develUpgrade librbd1Upgrade python3-radosUpgrade librgw-develUpgrade python-rbdUpgrade librados-develUpgrade libcephfs2Upgrade libradosstriper-develUpgrade rbd-mirrorUpgrade ceph-mgrUpgrade ceph-monUpgrade python3-ceph-commonUpgrade python-rgwUpgrade librbd-develUpgrade ceph-osdUpgrade rados-objclass-develUpgrade ceph-radosgwUpgrade ceph-fuseUpgrade librados2Upgrade python3-cephfsUpgrade libradosstriper1Upgrade librgw2Upgrade python3-ceph-argparseUpgrade python3-rbdUpgrade ceph-testUpgrade cephUpgrade ceph-mdsUpgrade libradospp-develUpgrade rbd-fuseUpgrade python3-rgwUpgrade python-radosUpgrade ceph-resource-agents | Aug 4, 2018 | Jul 10, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jul 10, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 10, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub