A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.
CVSS Details
- CVSS 3.1 Base Score: 6.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cephUpgrade ceph16 | Aug 22, 2024 | Apr 13, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 13, 2020 |
| Debian | — | Upgrade ceph | Jul 30, 2024 | Apr 13, 2020 |
| Freebsd | — | Upgrade ceph14 | Apr 30, 2020 | Apr 14, 2020 |
| Gentoo Linux | — | Upgrade sys-cluster/ceph. | May 28, 2021 | Apr 13, 2020 |
| Suse | — | Upgrade librados-develUpgrade cephfs-shellUpgrade libcephfs2Upgrade ceph-mgr-sshUpgrade librbd1Upgrade ceph-radosgwUpgrade ceph-commonUpgrade python3-radosUpgrade ceph-mdsUpgrade ceph-grafana-dashboardsUpgrade python3-ceph-commonUpgrade ceph-mgrUpgrade libcephfs-develUpgrade ceph-monUpgrade python3-ceph-argparseUpgrade librgw-develUpgrade rbd-nbdUpgrade librgw2Upgrade ceph-mgr-k8seventsUpgrade libradosstriper1Upgrade ceph-testUpgrade librbd-develUpgrade ceph-mgr-dashboardUpgrade libradosstriper-develUpgrade rbd-fuseUpgrade ceph-resource-agentsUpgrade rbd-mirrorUpgrade libradospp-develUpgrade ceph-osdUpgrade librados2Upgrade python3-cephfsUpgrade ceph-mgr-diskprediction-cloudUpgrade ceph-mgr-rookUpgrade ceph-mgr-diskprediction-localUpgrade python3-rbdUpgrade ceph-prometheus-alertsUpgrade python3-rgwUpgrade cephUpgrade ceph-dashboard-e2eUpgrade rados-objclass-develUpgrade ceph-fuseUpgrade ceph-base | Apr 11, 2020 | Apr 7, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub