A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ceph16Upgrade ceph | Aug 22, 2024 | Apr 13, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 13, 2020 |
| Debian | — | Upgrade ceph | Jul 30, 2024 | Apr 13, 2020 |
| Freebsd | — | Upgrade ceph14 | Apr 30, 2020 | Apr 14, 2020 |
| Gentoo Linux | — | Upgrade sys-cluster/ceph. | May 28, 2021 | Apr 13, 2020 |
| Suse | — | Upgrade ceph-mgrUpgrade ceph-monUpgrade cephfs-shellUpgrade librados-develUpgrade ceph-mdsUpgrade librgw-develUpgrade python3-ceph-argparseUpgrade ceph-commonUpgrade libcephfs2Upgrade python3-ceph-commonUpgrade ceph-grafana-dashboardsUpgrade ceph-mgr-sshUpgrade ceph-radosgwUpgrade python3-radosUpgrade librbd1Upgrade libcephfs-develUpgrade librbd-develUpgrade ceph-mgr-rookUpgrade ceph-testUpgrade libradosstriper1Upgrade ceph-osdUpgrade ceph-mgr-k8seventsUpgrade ceph-resource-agentsUpgrade ceph-fuseUpgrade python3-rbdUpgrade python3-rgwUpgrade ceph-mgr-diskprediction-localUpgrade ceph-prometheus-alertsUpgrade python3-cephfsUpgrade cephUpgrade librados2Upgrade ceph-mgr-diskprediction-cloudUpgrade ceph-dashboard-e2eUpgrade rbd-nbdUpgrade ceph-mgr-dashboardUpgrade rados-objclass-develUpgrade libradosstriper-develUpgrade librgw2Upgrade ceph-baseUpgrade rbd-fuseUpgrade libradospp-develUpgrade rbd-mirror | Apr 11, 2020 | Apr 7, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub