It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption.
CVSS Details
- CVSS 3.1 Base Score: 5.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
- CVSS 3.0 Base Score: 3.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python-rgwUpgrade ceph-radosgwUpgrade librgw2Upgrade nfs-ganesha-rgwUpgrade nfs-ganesha-cephUpgrade libntirpc-debuginfoUpgrade nfs-ganeshaUpgrade libcephfs2Upgrade libradosstriper1Upgrade librgw-develUpgrade ceph-selinuxUpgrade ceph-baseUpgrade ceph-ansibleUpgrade python-cephfsUpgrade ceph-debuginfoUpgrade ceph-commonUpgrade cephmetrics-ansibleUpgrade ceph-iscsi-configUpgrade librbd-develUpgrade librados-develUpgrade ceph-fuseUpgrade nfs-ganesha-debuginfoUpgrade libntirpcUpgrade python2-cryptoUpgrade rbd-mirrorUpgrade python-crypto-debuginfoUpgrade ceph-mdsUpgrade libcephfs-devel | Mar 5, 2020 | Jan 15, 2019 |
| Debian | — | Upgrade ceph | Mar 12, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-radosUpgrade librados2Upgrade librbd1Upgrade python-rbd | Mar 24, 2020 | Jan 15, 2019 |
| Redhat_linux | — | Upgrade ceph-radosgwUpgrade librbd-develUpgrade ceph-mdsUpgrade ceph-fuseUpgrade python-crypto-debuginfoUpgrade libradosstriper1Upgrade cephmetrics-ansibleUpgrade ceph-ansibleUpgrade python-cephfsUpgrade librgw2Upgrade python-rgwUpgrade ceph-selinuxUpgrade ceph-iscsi-configUpgrade nfs-ganesha-rgwUpgrade ceph-commonUpgrade nfs-ganesha-cephUpgrade librados-develUpgrade python2-cryptoUpgrade ceph-debuginfoUpgrade ceph-baseUpgrade libntirpc-debuginfoUpgrade libcephfs-develUpgrade rbd-mirrorUpgrade libcephfs2Upgrade librgw-develUpgrade nfs-ganesha-debuginfoUpgrade nfs-ganeshaUpgrade libntirpc | Mar 5, 2020 | Jan 15, 2019 |
| Suse | — | Upgrade rbd-fuseUpgrade rados-objclass-develUpgrade ceph-fuseUpgrade ceph-testUpgrade rbd-nbdUpgrade libcephfs-develUpgrade librbd-develUpgrade cephUpgrade librados2Upgrade python-cephfsUpgrade python-radosUpgrade python3-radosUpgrade ceph-monUpgrade libradosstriper1Upgrade ceph-radosgwUpgrade librbd1Upgrade python-rgwUpgrade ceph-commonUpgrade librgw2Upgrade ceph-mdsUpgrade ceph-osdUpgrade python3-rbdUpgrade ceph-mgrUpgrade librgw-develUpgrade ceph-baseUpgrade python3-cephfsUpgrade ceph-resource-agentsUpgrade rbd-mirrorUpgrade libradosstriper-develUpgrade librados-develUpgrade python-rbdUpgrade libcephfs2Upgrade python3-rgw | Feb 27, 2019 | Jan 15, 2019 |
| Ubuntu | — | Upgrade ceph-common (Ubuntu Pro)Upgrade ceph-commonUpgrade ceph (Ubuntu Pro)Upgrade radosgw (Ubuntu Pro)Upgrade ceph | Jun 25, 2019 | Jan 15, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub