A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade librbd-develUpgrade ceph-ansibleUpgrade ceph-radosgwUpgrade librgw2Upgrade libradosstriper1Upgrade cephmetricsUpgrade ceph-selinuxUpgrade ceph-fuseUpgrade cephmetrics-collectorsUpgrade python-rgwUpgrade cephmetrics-ansibleUpgrade ceph-commonUpgrade libcephfs-develUpgrade ceph-mdsUpgrade nfs-ganesha-cephUpgrade libcephfs1-develUpgrade rbd-mirrorUpgrade libcephfs1Upgrade ceph-debuginfoUpgrade python-cephfsUpgrade nfs-ganesha-debuginfoUpgrade librgw2-develUpgrade librgw-develUpgrade ceph-baseUpgrade cephmetrics-grafana-pluginsUpgrade nfs-ganesha-rgwUpgrade librados-develUpgrade nfs-ganeshaUpgrade libcephfs2 | Aug 28, 2019 | Jul 10, 2018 |
| Debian | — | Upgrade ceph | Nov 14, 2018 | Jul 10, 2018 |
| Redhat_linux | — | Upgrade ceph-selinuxUpgrade libradosstriper1Upgrade ceph-ansibleUpgrade librgw2Upgrade cephmetrics-ansibleUpgrade python-rgwUpgrade nfs-ganesha-cephUpgrade ceph-radosgwUpgrade librbd-develUpgrade nfs-ganeshaUpgrade nfs-ganesha-rgwUpgrade ceph-mdsUpgrade cephmetrics-grafana-pluginsUpgrade cephmetricsUpgrade ceph-debuginfoUpgrade libcephfs-develUpgrade ceph-commonUpgrade librados-develUpgrade rbd-mirrorUpgrade librgw2-develUpgrade ceph-baseUpgrade ceph-fuseUpgrade librgw-develUpgrade libcephfs1-develUpgrade libcephfs1Upgrade cephmetrics-collectorsUpgrade python-cephfsUpgrade libcephfs2Upgrade nfs-ganesha-debuginfo | Jul 27, 2018 | Jul 10, 2018 |
| Suse | — | Upgrade librbd1Upgrade python-cephfsUpgrade librgw-develUpgrade ceph-monUpgrade python-rbdUpgrade libradosstriper-develUpgrade libcephfs2Upgrade librados-develUpgrade ceph-mgrUpgrade ceph-baseUpgrade rbd-mirrorUpgrade python3-ceph-commonUpgrade libcephfs-develUpgrade python3-radosUpgrade ceph-commonUpgrade rbd-nbdUpgrade python3-ceph-argparseUpgrade ceph-osdUpgrade ceph-fuseUpgrade librados2Upgrade librbd-develUpgrade librgw2Upgrade ceph-mdsUpgrade ceph-testUpgrade rbd-fuseUpgrade cephUpgrade python3-rbdUpgrade libradospp-develUpgrade python3-rgwUpgrade python-rgwUpgrade python3-cephfsUpgrade libradosstriper1Upgrade ceph-radosgwUpgrade python-radosUpgrade rados-objclass-develUpgrade ceph-resource-agents | Aug 4, 2018 | Jul 10, 2018 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jul 10, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 10, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub