It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption.
CVSS Details
- CVSS 3.1 Base Score: 5.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
- CVSS 3.0 Base Score: 3.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade nfs-ganeshaUpgrade libcephfs2Upgrade ceph-selinuxUpgrade libntirpc-debuginfoUpgrade ceph-baseUpgrade librgw2Upgrade python-rgwUpgrade libradosstriper1Upgrade nfs-ganesha-rgwUpgrade ceph-radosgwUpgrade nfs-ganesha-cephUpgrade ceph-ansibleUpgrade librgw-develUpgrade python2-cryptoUpgrade libcephfs-develUpgrade ceph-fuseUpgrade ceph-commonUpgrade libntirpcUpgrade ceph-debuginfoUpgrade python-cephfsUpgrade cephmetrics-ansibleUpgrade ceph-mdsUpgrade python-crypto-debuginfoUpgrade rbd-mirrorUpgrade librbd-develUpgrade ceph-iscsi-configUpgrade nfs-ganesha-debuginfoUpgrade librados-devel | Mar 5, 2020 | Jan 15, 2019 |
| Debian | — | Upgrade ceph | Mar 12, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade librados2Upgrade python-radosUpgrade python-rbdUpgrade librbd1 | Mar 24, 2020 | Jan 15, 2019 |
| Redhat_linux | — | Upgrade librados-develUpgrade nfs-ganesha-cephUpgrade rbd-mirrorUpgrade librgw-develUpgrade ceph-debuginfoUpgrade libntirpcUpgrade libcephfs-develUpgrade cephmetrics-ansibleUpgrade libradosstriper1Upgrade ceph-commonUpgrade ceph-ansibleUpgrade ceph-iscsi-configUpgrade librbd-develUpgrade ceph-selinuxUpgrade nfs-ganesha-rgwUpgrade ceph-fuseUpgrade ceph-mdsUpgrade python-cephfsUpgrade librgw2Upgrade python-rgwUpgrade python-crypto-debuginfoUpgrade ceph-radosgwUpgrade ceph-baseUpgrade nfs-ganesha-debuginfoUpgrade nfs-ganeshaUpgrade libcephfs2Upgrade python2-cryptoUpgrade libntirpc-debuginfo | Mar 5, 2020 | Jan 15, 2019 |
| Suse | — | Upgrade ceph-osdUpgrade python3-rgwUpgrade ceph-mdsUpgrade python3-rbdUpgrade ceph-baseUpgrade librgw-develUpgrade rbd-mirrorUpgrade librgw2Upgrade libradosstriper-develUpgrade ceph-resource-agentsUpgrade librados-develUpgrade ceph-mgrUpgrade libcephfs2Upgrade python-rbdUpgrade python3-cephfsUpgrade ceph-commonUpgrade ceph-monUpgrade libcephfs-develUpgrade ceph-radosgwUpgrade python3-radosUpgrade librbd-develUpgrade librados2Upgrade rbd-nbdUpgrade librbd1Upgrade rados-objclass-develUpgrade python-radosUpgrade libradosstriper1Upgrade python-cephfsUpgrade rbd-fuseUpgrade cephUpgrade ceph-fuseUpgrade python-rgwUpgrade ceph-test | Feb 27, 2019 | Jan 15, 2019 |
| Ubuntu | — | Upgrade ceph-commonUpgrade ceph-common (Ubuntu Pro)Upgrade radosgw (Ubuntu Pro)Upgrade ceph (Ubuntu Pro)Upgrade ceph | Jun 25, 2019 | Jan 15, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub