A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ceph16Upgrade ceph | Aug 22, 2024 | Apr 13, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 13, 2020 |
| Debian | — | Upgrade ceph | Jul 30, 2024 | Apr 13, 2020 |
| Freebsd | — | Upgrade ceph14 | Apr 30, 2020 | Apr 14, 2020 |
| Gentoo Linux | — | Upgrade sys-cluster/ceph. | May 28, 2021 | Apr 13, 2020 |
| Suse | — | Upgrade librados-develUpgrade libcephfs-develUpgrade ceph-mgrUpgrade cephfs-shellUpgrade python3-radosUpgrade ceph-monUpgrade ceph-commonUpgrade ceph-grafana-dashboardsUpgrade ceph-mgr-sshUpgrade librgw-develUpgrade librbd1Upgrade ceph-radosgwUpgrade ceph-mdsUpgrade python3-ceph-argparseUpgrade python3-ceph-commonUpgrade libcephfs2Upgrade rados-objclass-develUpgrade libradosstriper-develUpgrade ceph-mgr-diskprediction-localUpgrade python3-rgwUpgrade ceph-osdUpgrade rbd-nbdUpgrade ceph-dashboard-e2eUpgrade rbd-fuseUpgrade ceph-mgr-dashboardUpgrade librgw2Upgrade libradospp-develUpgrade ceph-resource-agentsUpgrade libradosstriper1Upgrade librbd-develUpgrade ceph-testUpgrade ceph-baseUpgrade ceph-fuseUpgrade ceph-mgr-k8seventsUpgrade librados2Upgrade ceph-mgr-diskprediction-cloudUpgrade rbd-mirrorUpgrade python3-cephfsUpgrade ceph-mgr-rookUpgrade python3-rbdUpgrade ceph-prometheus-alertsUpgrade ceph | Apr 11, 2020 | Apr 7, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub