It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption.
CVSS Details
- CVSS 3.1 Base Score: 5.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
- CVSS 3.0 Base Score: 3.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade ceph-debuginfoUpgrade libcephfs-develUpgrade cephmetrics-ansibleUpgrade ceph-commonUpgrade librados-develUpgrade nfs-ganesha-debuginfoUpgrade python2-cryptoUpgrade librbd-develUpgrade python-cephfsUpgrade ceph-iscsi-configUpgrade ceph-mdsUpgrade python-crypto-debuginfoUpgrade libntirpcUpgrade ceph-fuseUpgrade rbd-mirrorUpgrade libntirpc-debuginfoUpgrade libradosstriper1Upgrade ceph-selinuxUpgrade librgw-develUpgrade libcephfs2Upgrade ceph-radosgwUpgrade nfs-ganesha-rgwUpgrade nfs-ganesha-cephUpgrade python-rgwUpgrade nfs-ganeshaUpgrade ceph-ansibleUpgrade librgw2Upgrade ceph-base | Mar 5, 2020 | Jan 15, 2019 |
| Debian | — | Upgrade ceph | Mar 12, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade librbd1Upgrade python-rbdUpgrade librados2Upgrade python-rados | Mar 24, 2020 | Jan 15, 2019 |
| Redhat_linux | — | Upgrade nfs-ganesha-debuginfoUpgrade libntirpcUpgrade librgw-develUpgrade librados-develUpgrade libntirpc-debuginfoUpgrade nfs-ganeshaUpgrade nfs-ganesha-cephUpgrade libcephfs-develUpgrade ceph-debuginfoUpgrade rbd-mirrorUpgrade python2-cryptoUpgrade libcephfs2Upgrade ceph-baseUpgrade libradosstriper1Upgrade ceph-ansibleUpgrade librbd-develUpgrade ceph-radosgwUpgrade ceph-selinuxUpgrade python-crypto-debuginfoUpgrade ceph-mdsUpgrade ceph-iscsi-configUpgrade ceph-fuseUpgrade python-cephfsUpgrade python-rgwUpgrade librgw2Upgrade cephmetrics-ansibleUpgrade ceph-commonUpgrade nfs-ganesha-rgw | Mar 5, 2020 | Jan 15, 2019 |
| Suse | — | Upgrade ceph-radosgwUpgrade python3-radosUpgrade libradosstriper1Upgrade ceph-testUpgrade librbd-develUpgrade librados2Upgrade rados-objclass-develUpgrade ceph-monUpgrade libcephfs-develUpgrade python-radosUpgrade python-rgwUpgrade rbd-fuseUpgrade python-cephfsUpgrade ceph-fuseUpgrade cephUpgrade librbd1Upgrade rbd-nbdUpgrade ceph-mgrUpgrade librgw2Upgrade libradosstriper-develUpgrade python3-rbdUpgrade rbd-mirrorUpgrade ceph-baseUpgrade libcephfs2Upgrade python3-rgwUpgrade ceph-osdUpgrade ceph-mdsUpgrade python-rbdUpgrade librgw-develUpgrade python3-cephfsUpgrade ceph-resource-agentsUpgrade librados-develUpgrade ceph-common | Feb 27, 2019 | Jan 15, 2019 |
| Ubuntu | — | Upgrade ceph-commonUpgrade ceph-common (Ubuntu Pro)Upgrade cephUpgrade ceph (Ubuntu Pro)Upgrade radosgw (Ubuntu Pro) | Jun 25, 2019 | Jan 15, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub