A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.
CVSS Details
- CVSS 3.1 Base Score: 6.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ceph16Upgrade ceph | Aug 22, 2024 | Apr 13, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 13, 2020 |
| Debian | — | Upgrade ceph | Jul 30, 2024 | Apr 13, 2020 |
| Freebsd | — | Upgrade ceph14 | Apr 30, 2020 | Apr 14, 2020 |
| Gentoo Linux | — | Upgrade sys-cluster/ceph. | May 28, 2021 | Apr 13, 2020 |
| Suse | — | Upgrade ceph-mgr-diskprediction-localUpgrade cephUpgrade librbd-develUpgrade rbd-nbdUpgrade rados-objclass-develUpgrade ceph-mgr-k8seventsUpgrade ceph-prometheus-alertsUpgrade ceph-testUpgrade ceph-baseUpgrade libradosstriper1Upgrade ceph-resource-agentsUpgrade ceph-osdUpgrade ceph-dashboard-e2eUpgrade python3-cephfsUpgrade librgw2Upgrade ceph-fuseUpgrade ceph-mgr-rookUpgrade rbd-fuseUpgrade ceph-mgr-dashboardUpgrade libradosstriper-develUpgrade libradospp-develUpgrade python3-rgwUpgrade ceph-mgr-diskprediction-cloudUpgrade librados2Upgrade python3-rbdUpgrade rbd-mirrorUpgrade python3-radosUpgrade ceph-mdsUpgrade ceph-grafana-dashboardsUpgrade python3-ceph-argparseUpgrade ceph-radosgwUpgrade cephfs-shellUpgrade python3-ceph-commonUpgrade ceph-monUpgrade libcephfs-develUpgrade ceph-mgrUpgrade librgw-develUpgrade libcephfs2Upgrade ceph-commonUpgrade librbd1Upgrade ceph-mgr-sshUpgrade librados-devel | Apr 11, 2020 | Apr 7, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub