It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption.
CVSS Details
- CVSS 3.1 Base Score: 5.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
- CVSS 3.0 Base Score: 3.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libcephfs2Upgrade python-rgwUpgrade libradosstriper1Upgrade ceph-radosgwUpgrade ceph-ansibleUpgrade nfs-ganesha-cephUpgrade nfs-ganeshaUpgrade ceph-selinuxUpgrade nfs-ganesha-rgwUpgrade librgw2Upgrade librgw-develUpgrade libntirpc-debuginfoUpgrade ceph-baseUpgrade cephmetrics-ansibleUpgrade python2-cryptoUpgrade ceph-mdsUpgrade python-cephfsUpgrade ceph-iscsi-configUpgrade python-crypto-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade rbd-mirrorUpgrade librados-develUpgrade librbd-develUpgrade ceph-fuseUpgrade ceph-commonUpgrade libcephfs-develUpgrade libntirpcUpgrade ceph-debuginfo | Mar 5, 2020 | Jan 15, 2019 |
| Debian | — | Upgrade ceph | Mar 12, 2019 | Jan 15, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-radosUpgrade librados2Upgrade python-rbdUpgrade librbd1 | Mar 24, 2020 | Jan 15, 2019 |
| Redhat_linux | — | Upgrade rbd-mirrorUpgrade nfs-ganesha-cephUpgrade librados-develUpgrade libntirpc-debuginfoUpgrade nfs-ganeshaUpgrade librgw-develUpgrade ceph-debuginfoUpgrade ceph-baseUpgrade nfs-ganesha-debuginfoUpgrade libcephfs-develUpgrade python2-cryptoUpgrade libntirpcUpgrade libcephfs2Upgrade ceph-ansibleUpgrade ceph-fuseUpgrade ceph-mdsUpgrade ceph-commonUpgrade ceph-selinuxUpgrade nfs-ganesha-rgwUpgrade libradosstriper1Upgrade cephmetrics-ansibleUpgrade librgw2Upgrade python-rgwUpgrade python-crypto-debuginfoUpgrade python-cephfsUpgrade ceph-iscsi-configUpgrade librbd-develUpgrade ceph-radosgw | Mar 5, 2020 | Jan 15, 2019 |
| Suse | — | Upgrade cephUpgrade rbd-fuseUpgrade rbd-nbdUpgrade librados2Upgrade ceph-testUpgrade python-cephfsUpgrade libcephfs-develUpgrade python-rgwUpgrade python3-radosUpgrade ceph-radosgwUpgrade libradosstriper1Upgrade librbd1Upgrade ceph-fuseUpgrade rados-objclass-develUpgrade ceph-monUpgrade python-radosUpgrade librbd-develUpgrade librgw2Upgrade libradosstriper-develUpgrade python3-rbdUpgrade ceph-commonUpgrade ceph-mdsUpgrade libcephfs2Upgrade ceph-resource-agentsUpgrade librados-develUpgrade python3-rgwUpgrade ceph-osdUpgrade rbd-mirrorUpgrade ceph-mgrUpgrade librgw-develUpgrade ceph-baseUpgrade python3-cephfsUpgrade python-rbd | Feb 27, 2019 | Jan 15, 2019 |
| Ubuntu | — | Upgrade ceph (Ubuntu Pro)Upgrade radosgw (Ubuntu Pro)Upgrade cephUpgrade ceph-common (Ubuntu Pro)Upgrade ceph-common | Jun 25, 2019 | Jan 15, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub