A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python3-ceph-argparseUpgrade python3-rbdUpgrade ceph-common-debuginfoUpgrade nfs-ganesha-rgwUpgrade python3-ceph-commonUpgrade ceph-commonUpgrade librados-develUpgrade rbd-mirrorUpgrade rbd-fuse-debuginfoUpgrade python3-rados-debuginfoUpgrade python3-cephfsUpgrade libcephsqlite-debuginfoUpgrade librbd-develUpgrade ceph-debugsourceUpgrade libcephfs-develUpgrade ceph-ansibleUpgrade ceph-grafana-dashboardsUpgrade ceph-immutable-object-cache-debuginfoUpgrade nfs-ganesha-rgw-debuginfoUpgrade cephfs-mirrorUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade python-cephfsUpgrade nfs-ganesha-proxyUpgrade libcephfs2-debuginfoUpgrade ceph-debuginfoUpgrade librgw2Upgrade python3-radosUpgrade librados-devel-debuginfoUpgrade libradosstriper1-debuginfoUpgrade nfs-ganesha-proxy-debuginfoUpgrade tcmu-runnerUpgrade ceph-mdsUpgrade ceph-fuse-debuginfoUpgrade rbd-nbdUpgrade libntirpc-debugsourceUpgrade ceph-radosgwUpgrade cephfs-topUpgrade nfs-ganesha-debugsourceUpgrade libntirpcUpgrade librgw-develUpgrade nfs-ganesha-selinuxUpgrade python-rgwUpgrade nfs-ganesha-debuginfoUpgrade librgw2-debuginfoUpgrade nfs-ganesha-vfs-debuginfoUpgrade python3-rgwUpgrade ceph-mds-debuginfoUpgrade python3-cephfs-debuginfoUpgrade nfs-ganesha-vfsUpgrade nfs-ganeshaUpgrade ceph-mon-debuginfoUpgrade nfs-ganesha-rados-graceUpgrade libradosstriper1Upgrade libradospp-develUpgrade libcephfs2Upgrade rbd-nbd-debuginfoUpgrade nfs-ganesha-cephUpgrade libtcmuUpgrade cephadm-ansibleUpgrade cephadmUpgrade ceph-iscsiUpgrade ceph-fuseUpgrade ceph-base-debuginfoUpgrade ceph-selinuxUpgrade ceph-immutable-object-cacheUpgrade python3-rbd-debuginfoUpgrade libntirpc-debuginfoUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade ceph-osd-debuginfoUpgrade nfs-ganesha-rados-urlsUpgrade ceph-baseUpgrade rbd-mirror-debuginfoUpgrade python3-rgw-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade python-ceph-argparseUpgrade ceph-resource-agentsUpgrade ceph-test-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade ceph-mgr-debuginfo | Apr 5, 2022 | Apr 4, 2022 |
| Debian | — | Upgrade ceph | Oct 25, 2023 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade librados2Upgrade python-radosUpgrade librbd1Upgrade python-rbd | Feb 9, 2023 | Aug 25, 2022 |
| Redhat_linux | — | Upgrade libcephfs-develUpgrade librados-develUpgrade librgw-develUpgrade nfs-ganesha-cephUpgrade python3-cephfs-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade libcephsqlite-debuginfoUpgrade cephfs-mirrorUpgrade libcephfs2Upgrade ceph-mdsUpgrade libntirpc-debuginfoUpgrade libradospp-develUpgrade python3-rgw-debuginfoUpgrade nfs-ganesha-proxy-debuginfoUpgrade nfs-ganesha-rgw-debuginfoUpgrade libtcmuUpgrade cephadm-ansibleUpgrade nfs-ganeshaUpgrade python3-rbdUpgrade nfs-ganesha-debuginfoUpgrade rbd-nbd-debuginfoUpgrade python3-rgwUpgrade ceph-baseUpgrade ceph-immutable-object-cache-debuginfoUpgrade libradosstriper1-debuginfoUpgrade ceph-resource-agentsUpgrade librgw2-debuginfoUpgrade nfs-ganesha-debugsourceUpgrade python3-rados-debuginfoUpgrade libcephfs2-debuginfoUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade ceph-debugsourceUpgrade ceph-grafana-dashboardsUpgrade ceph-fuse-debuginfoUpgrade ceph-mgr-debuginfoUpgrade nfs-ganesha-vfsUpgrade ceph-base-debuginfoUpgrade nfs-ganesha-rgwUpgrade python3-cephfsUpgrade python3-ceph-argparseUpgrade python-rgwUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade tcmu-runnerUpgrade nfs-ganesha-rados-graceUpgrade rbd-fuse-debuginfoUpgrade ceph-commonUpgrade nfs-ganesha-ceph-debuginfoUpgrade ceph-immutable-object-cacheUpgrade nfs-ganesha-rados-urlsUpgrade ceph-debuginfoUpgrade cephfs-topUpgrade librgw2Upgrade ceph-ansibleUpgrade python3-rbd-debuginfoUpgrade python3-ceph-commonUpgrade rbd-nbdUpgrade ceph-selinuxUpgrade nfs-ganesha-selinuxUpgrade nfs-ganesha-vfs-debuginfoUpgrade cephadmUpgrade librbd-develUpgrade rbd-mirror-debuginfoUpgrade ceph-test-debuginfoUpgrade rbd-mirrorUpgrade libntirpc-debugsourceUpgrade ceph-common-debuginfoUpgrade libntirpcUpgrade ceph-fuseUpgrade ceph-osd-debuginfoUpgrade nfs-ganesha-proxyUpgrade librados-devel-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade ceph-radosgwUpgrade libradosstriper1Upgrade python-ceph-argparseUpgrade ceph-mon-debuginfoUpgrade ceph-mds-debuginfoUpgrade python3-radosUpgrade ceph-iscsiUpgrade python-cephfs | Apr 5, 2022 | Apr 4, 2022 |
| Suse | — | Upgrade ceph-mgr-modules-coreUpgrade ceph-testUpgrade ceph-monUpgrade ceph-prometheus-alertsUpgrade rbd-nbdUpgrade python3-ceph-argparseUpgrade ceph-mgr-dashboardUpgrade cephUpgrade libcephsqliteUpgrade libradospp-develUpgrade ceph-mdsUpgrade python3-rbdUpgrade ceph-mgr-cephadmUpgrade librgw2Upgrade librados-develUpgrade librbd1Upgrade python3-cephfsUpgrade libcephfs-develUpgrade ceph-baseUpgrade python3-radosUpgrade ceph-commonUpgrade rbd-mirrorUpgrade ceph-mgr-diskprediction-localUpgrade cephfs-shellUpgrade librbd-develUpgrade cephadmUpgrade ceph-grafana-dashboardsUpgrade cephfs-topUpgrade ceph-mgr-k8seventsUpgrade libcephfs2Upgrade ceph-osdUpgrade rados-objclass-develUpgrade librgw-develUpgrade ceph-radosgwUpgrade cephfs-mirrorUpgrade python3-ceph-commonUpgrade rbd-fuseUpgrade ceph-fuseUpgrade python3-rgwUpgrade ceph-mgr-rookUpgrade libfmt8Upgrade ceph-immutable-object-cacheUpgrade libcephsqlite-develUpgrade ceph-mgrUpgrade librados2 | Oct 26, 2022 | Aug 25, 2022 |
| Ubuntu | — | Upgrade ceph-commonUpgrade cephUpgrade ceph-base | May 10, 2023 | Aug 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub