A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2.14, where it does not verify Ceph clients correctly and is then vulnerable to replay attacks in Nautilus. This flaw allows an attacker with access to the Ceph cluster network to authenticate with the Ceph service via a packet sniffer and perform actions allowed by the Ceph service. This issue is a reintroduction of CVE-2018-1128, affecting the msgr2 protocol. The msgr 2 protocol is used for all communication except older clients that do not support the msgr2 protocol. The msgr1 protocol is not affected. The highest threat from this vulnerability is to confidentiality, integrity, and system availability.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ceph16Upgrade ceph | Aug 22, 2024 | Nov 23, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 23, 2020 |
| Centos_linux | — | Upgrade nfs-ganesha-rados-graceUpgrade rbd-mirrorUpgrade nfs-ganeshaUpgrade libcephfs-develUpgrade ceph-fuseUpgrade python-cephfsUpgrade rbd-fuse-debuginfoUpgrade ceph-mds-debuginfoUpgrade libntirpc-debugsourceUpgrade nfs-ganesha-proxyUpgrade rbd-nbdUpgrade ceph-debuginfoUpgrade ceph-selinuxUpgrade ceph-base-debuginfoUpgrade ansible-runner-serviceUpgrade ceph-common-debuginfoUpgrade nfs-ganesha-rados-urlsUpgrade librados-devel-debuginfoUpgrade ceph-radosgwUpgrade libntirpcUpgrade libradosstriper1Upgrade python3-rgw-debuginfoUpgrade nfs-ganesha-cephUpgrade rbd-mirror-debuginfoUpgrade ceph-ansibleUpgrade python3-rbd-debuginfoUpgrade python-ceph-argparseUpgrade ceph-commonUpgrade libradosstriper1-debuginfoUpgrade librbd-develUpgrade python-rgwUpgrade ceph-fuse-debuginfoUpgrade ceph-mgr-debuginfoUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade ceph-osd-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade python3-rados-debuginfoUpgrade libcephfs2Upgrade librgw2-debuginfoUpgrade rbd-nbd-debuginfoUpgrade python3-radosUpgrade nfs-ganesha-vfsUpgrade librgw2Upgrade libntirpc-debuginfoUpgrade python3-ceph-argparseUpgrade nfs-ganesha-rgw-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade ceph-debugsourceUpgrade ceph-test-debuginfoUpgrade librados-develUpgrade libcephfs2-debuginfoUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade librgw-develUpgrade ceph-grafana-dashboardsUpgrade ceph-baseUpgrade nfs-ganesha-debugsourceUpgrade python3-cephfs-debuginfoUpgrade nfs-ganesha-proxy-debuginfoUpgrade python3-cephfsUpgrade nfs-ganesha-vfs-debuginfoUpgrade python3-rbdUpgrade python3-rgwUpgrade libradospp-develUpgrade nfs-ganesha-rgwUpgrade ceph-mdsUpgrade ceph-mon-debuginfoUpgrade cockpit-ceph-installerUpgrade nfs-ganesha-selinux | Dec 11, 2020 | Nov 23, 2020 |
| Debian | — | Upgrade ceph | Jul 30, 2024 | Nov 23, 2020 |
| Gentoo Linux | — | Upgrade sys-cluster/ceph. | May 28, 2021 | Nov 23, 2020 |
| Redhat_linux | — | Upgrade ceph-grafana-dashboardsUpgrade python3-ceph-argparseUpgrade python3-rgw-debuginfoUpgrade ceph-baseUpgrade rbd-nbd-debuginfoUpgrade librgw2-debuginfoUpgrade ceph-test-debuginfoUpgrade libcephfs2Upgrade python3-cephfs-debuginfoUpgrade nfs-ganesha-vfs-debuginfoUpgrade python3-rgwUpgrade python3-radosUpgrade libcephfs2-debuginfoUpgrade nfs-ganesha-proxyUpgrade ceph-ansibleUpgrade cockpit-ceph-installerUpgrade nfs-ganesha-cephUpgrade nfs-ganesha-rgwUpgrade rbd-mirror-debuginfoUpgrade python3-rados-debuginfoUpgrade python3-cephfsUpgrade ceph-mdsUpgrade libradosstriper1Upgrade ceph-radosgw-debuginfoUpgrade ceph-base-debuginfoUpgrade librgw-develUpgrade ceph-osd-debuginfoUpgrade librgw2Upgrade ceph-mon-debuginfoUpgrade libradospp-develUpgrade ceph-debugsourceUpgrade python3-rbdUpgrade libntirpc-debuginfoUpgrade nfs-ganesha-proxy-debuginfoUpgrade nfs-ganesha-selinuxUpgrade nfs-ganesha-rados-graceUpgrade ceph-mgr-debuginfoUpgrade ansible-runner-serviceUpgrade nfs-ganesha-vfsUpgrade rbd-mirrorUpgrade ceph-fuse-debuginfoUpgrade ceph-common-debuginfoUpgrade rbd-nbdUpgrade ceph-radosgwUpgrade ceph-mds-debuginfoUpgrade nfs-ganesha-debugsourceUpgrade ceph-commonUpgrade librados-develUpgrade ceph-fuseUpgrade libcephfs-develUpgrade python-cephfsUpgrade libntirpc-debugsourceUpgrade nfs-ganesha-rados-urlsUpgrade python-rgwUpgrade ceph-selinuxUpgrade nfs-ganesha-ceph-debuginfoUpgrade nfs-ganeshaUpgrade nfs-ganesha-rgw-debuginfoUpgrade librados-devel-debuginfoUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade libradosstriper1-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade python3-rbd-debuginfoUpgrade ceph-debuginfoUpgrade rbd-fuse-debuginfoUpgrade libntirpcUpgrade python-ceph-argparseUpgrade librbd-devel | Dec 11, 2020 | Nov 23, 2020 |
| Suse | — | Upgrade ceph-osdUpgrade libradosstriper-develUpgrade ceph-mgr-diskprediction-localUpgrade ceph-fuseUpgrade libcephfs-develUpgrade python3-rbdUpgrade ceph-resource-agentsUpgrade ceph-mgrUpgrade libradospp-develUpgrade librgw2Upgrade ceph-mdsUpgrade ceph-mgr-cephadmUpgrade ceph-dashboard-e2eUpgrade ceph-mgr-diskprediction-cloudUpgrade python3-ceph-argparseUpgrade rbd-mirrorUpgrade libradosstriper1Upgrade rbd-nbdUpgrade ceph-prometheus-alertsUpgrade cephfs-shellUpgrade ceph-mgr-modules-coreUpgrade ceph-testUpgrade ceph-commonUpgrade python3-cephfsUpgrade rados-objclass-develUpgrade ceph-immutable-object-cacheUpgrade cephUpgrade ceph-baseUpgrade librgw-develUpgrade librados-develUpgrade ceph-mgr-sshUpgrade rbd-fuseUpgrade ceph-grafana-dashboardsUpgrade python3-ceph-commonUpgrade python3-radosUpgrade ceph-mgr-dashboardUpgrade cephadmUpgrade python3-rgwUpgrade librbd-develUpgrade libcephfs2Upgrade librados2Upgrade ceph-radosgwUpgrade ceph-mgr-k8seventsUpgrade ceph-mgr-rookUpgrade librbd1Upgrade ceph-mon | Nov 28, 2020 | Nov 23, 2020 |
| Ubuntu | — | Upgrade ceph-baseUpgrade ceph-commonUpgrade ceph | Jan 29, 2021 | Nov 23, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub