A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade ceph-osd-debuginfoUpgrade ceph-mgr-debuginfoUpgrade libradospp-develUpgrade cephfs-mirror-debuginfoUpgrade python3-rgw-debuginfoUpgrade libradosstriper1Upgrade libtcmuUpgrade ceph-test-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade nfs-ganesha-rados-graceUpgrade ceph-base-debuginfoUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade ceph-iscsiUpgrade ceph-fuseUpgrade python-ceph-argparseUpgrade nfs-ganeshaUpgrade python3-rgwUpgrade cephadmUpgrade nfs-ganesha-cephUpgrade nfs-ganesha-rados-urlsUpgrade cephadm-ansibleUpgrade rbd-mirror-debuginfoUpgrade python3-cephfs-debuginfoUpgrade ceph-immutable-object-cacheUpgrade rbd-nbd-debuginfoUpgrade ceph-baseUpgrade ceph-selinuxUpgrade libcephfs2Upgrade python3-rbd-debuginfoUpgrade libntirpc-debuginfoUpgrade nfs-ganesha-vfsUpgrade nfs-ganesha-ceph-debuginfoUpgrade ceph-resource-agentsUpgrade ceph-mon-debuginfoUpgrade ceph-mds-debuginfoUpgrade python3-rbdUpgrade librados-devel-debuginfoUpgrade ceph-ansibleUpgrade librbd-develUpgrade libradosstriper1-debuginfoUpgrade nfs-ganesha-rgw-debuginfoUpgrade ceph-debugsourceUpgrade tcmu-runnerUpgrade ceph-commonUpgrade cephfs-topUpgrade ceph-mdsUpgrade libcephfs-develUpgrade librados-develUpgrade ceph-grafana-dashboardsUpgrade ceph-immutable-object-cache-debuginfoUpgrade cephfs-mirrorUpgrade libcephfs2-debuginfoUpgrade python3-rados-debuginfoUpgrade nfs-ganesha-rgwUpgrade libcephsqlite-debuginfoUpgrade nfs-ganesha-proxy-debuginfoUpgrade python3-ceph-commonUpgrade ceph-radosgwUpgrade python-rgwUpgrade nfs-ganesha-vfs-debuginfoUpgrade nfs-ganesha-selinuxUpgrade nfs-ganesha-debuginfoUpgrade librgw2-debuginfoUpgrade librgw-develUpgrade libntirpcUpgrade rbd-fuse-debuginfoUpgrade python3-ceph-argparseUpgrade rbd-nbdUpgrade nfs-ganesha-debugsourceUpgrade librgw2Upgrade python3-radosUpgrade libntirpc-debugsourceUpgrade ceph-fuse-debuginfoUpgrade ceph-common-debuginfoUpgrade rbd-mirrorUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade ceph-debuginfoUpgrade python3-cephfsUpgrade nfs-ganesha-proxyUpgrade python-cephfs | Apr 5, 2022 | Apr 4, 2022 |
| Debian | — | Upgrade ceph | Oct 25, 2023 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-rbdUpgrade librados2Upgrade python-radosUpgrade librbd1 | Feb 9, 2023 | Aug 25, 2022 |
| Redhat_linux | — | Upgrade libradospp-develUpgrade ceph-grafana-dashboardsUpgrade ceph-resource-agentsUpgrade python3-cephfs-debuginfoUpgrade nfs-ganesha-vfsUpgrade libcephsqlite-debuginfoUpgrade python3-ceph-argparseUpgrade python3-cephfsUpgrade rbd-nbd-debuginfoUpgrade libradosstriper1-debuginfoUpgrade nfs-ganesha-debugsourceUpgrade librados-develUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade libcephfs2Upgrade python3-rgwUpgrade cephadm-ansibleUpgrade ceph-immutable-object-cache-debuginfoUpgrade python3-rbdUpgrade ceph-radosgw-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade python3-rados-debuginfoUpgrade ceph-fuse-debuginfoUpgrade nfs-ganesha-proxy-debuginfoUpgrade ceph-mdsUpgrade nfs-ganesha-rgwUpgrade ceph-debugsourceUpgrade nfs-ganeshaUpgrade ceph-mgr-debuginfoUpgrade nfs-ganesha-rgw-debuginfoUpgrade libntirpc-debuginfoUpgrade ceph-base-debuginfoUpgrade librgw2-debuginfoUpgrade librgw-develUpgrade nfs-ganesha-cephUpgrade libcephfs-develUpgrade libcephfs2-debuginfoUpgrade ceph-baseUpgrade libtcmuUpgrade python3-rgw-debuginfoUpgrade cephfs-mirrorUpgrade ceph-radosgwUpgrade cephadmUpgrade librados-devel-debuginfoUpgrade rbd-mirrorUpgrade rbd-mirror-debuginfoUpgrade ceph-test-debuginfoUpgrade librbd-develUpgrade libntirpc-debugsourceUpgrade nfs-ganesha-rados-graceUpgrade ceph-mds-debuginfoUpgrade ceph-mon-debuginfoUpgrade rbd-fuse-debuginfoUpgrade python-rgwUpgrade nfs-ganesha-rados-urlsUpgrade ceph-immutable-object-cacheUpgrade ceph-commonUpgrade ceph-debuginfoUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade python-ceph-argparseUpgrade ceph-ansibleUpgrade python3-radosUpgrade nfs-ganesha-proxyUpgrade ceph-osd-debuginfoUpgrade librgw2Upgrade ceph-iscsiUpgrade ceph-common-debuginfoUpgrade python-cephfsUpgrade libradosstriper1Upgrade ceph-fuseUpgrade cephfs-topUpgrade libntirpcUpgrade python3-rbd-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade rbd-nbdUpgrade nfs-ganesha-vfs-debuginfoUpgrade ceph-selinuxUpgrade nfs-ganesha-selinuxUpgrade tcmu-runnerUpgrade python3-ceph-common | Apr 5, 2022 | Apr 4, 2022 |
| Suse | — | Upgrade ceph-mgr-modules-coreUpgrade python3-ceph-argparseUpgrade ceph-baseUpgrade python3-radosUpgrade python3-cephfsUpgrade python3-rbdUpgrade ceph-mgr-dashboardUpgrade librbd1Upgrade ceph-commonUpgrade rbd-nbdUpgrade libradospp-develUpgrade cephUpgrade ceph-monUpgrade cephfs-shellUpgrade rbd-mirrorUpgrade ceph-prometheus-alertsUpgrade libcephsqliteUpgrade ceph-mgr-diskprediction-localUpgrade ceph-testUpgrade librados-develUpgrade ceph-mgr-cephadmUpgrade librgw2Upgrade ceph-mdsUpgrade libcephfs-develUpgrade ceph-radosgwUpgrade ceph-mgrUpgrade librados2Upgrade libcephsqlite-develUpgrade ceph-mgr-k8seventsUpgrade cephadmUpgrade librbd-develUpgrade ceph-fuseUpgrade ceph-grafana-dashboardsUpgrade python3-rgwUpgrade ceph-mgr-rookUpgrade libfmt8Upgrade rbd-fuseUpgrade ceph-osdUpgrade ceph-immutable-object-cacheUpgrade rados-objclass-develUpgrade librgw-develUpgrade python3-ceph-commonUpgrade cephfs-mirrorUpgrade libcephfs2Upgrade cephfs-top | Oct 26, 2022 | Aug 25, 2022 |
| Ubuntu | — | Upgrade ceph-commonUpgrade ceph-baseUpgrade ceph | May 10, 2023 | Aug 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub