A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade ceph-mds-debuginfoUpgrade cephadm-ansibleUpgrade rbd-nbd-debuginfoUpgrade ceph-immutable-object-cacheUpgrade ceph-test-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade nfs-ganesha-rados-graceUpgrade python3-cephfs-debuginfoUpgrade ceph-mon-debuginfoUpgrade python3-rbd-debuginfoUpgrade libradospp-develUpgrade libradosstriper1Upgrade nfs-ganesha-rados-urlsUpgrade cephfs-mirror-debuginfoUpgrade ceph-baseUpgrade ceph-osd-debuginfoUpgrade ceph-resource-agentsUpgrade python3-rgw-debuginfoUpgrade python3-rgwUpgrade ceph-mgr-debuginfoUpgrade libtcmuUpgrade nfs-ganeshaUpgrade rbd-mirror-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade nfs-ganesha-vfsUpgrade libntirpc-debuginfoUpgrade ceph-fuseUpgrade nfs-ganesha-cephUpgrade ceph-selinuxUpgrade libcephfs2Upgrade nfs-ganesha-rados-grace-debuginfoUpgrade python-ceph-argparseUpgrade cephadmUpgrade ceph-iscsiUpgrade ceph-base-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade librgw-develUpgrade nfs-ganesha-vfs-debuginfoUpgrade nfs-ganesha-rgw-debuginfoUpgrade python-cephfsUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade ceph-debugsourceUpgrade python-rgwUpgrade nfs-ganesha-selinuxUpgrade librgw2-debuginfoUpgrade cephfs-topUpgrade python3-rados-debuginfoUpgrade nfs-ganesha-rgwUpgrade libcephsqlite-debuginfoUpgrade nfs-ganesha-proxy-debuginfoUpgrade python3-ceph-commonUpgrade rbd-fuse-debuginfoUpgrade python3-ceph-argparseUpgrade rbd-mirrorUpgrade python3-rbdUpgrade librados-develUpgrade ceph-fuse-debuginfoUpgrade ceph-common-debuginfoUpgrade ceph-commonUpgrade ceph-debuginfoUpgrade python3-radosUpgrade librgw2Upgrade rbd-nbdUpgrade librados-devel-debuginfoUpgrade libcephfs2-debuginfoUpgrade cephfs-mirrorUpgrade ceph-immutable-object-cache-debuginfoUpgrade ceph-grafana-dashboardsUpgrade nfs-ganesha-proxyUpgrade libcephfs-develUpgrade ceph-mdsUpgrade librbd-develUpgrade libradosstriper1-debuginfoUpgrade python3-cephfsUpgrade nfs-ganesha-debugsourceUpgrade libntirpc-debugsourceUpgrade ceph-ansibleUpgrade libntirpcUpgrade ceph-radosgwUpgrade tcmu-runner | Apr 5, 2022 | Apr 4, 2022 |
| Debian | — | Upgrade ceph | Oct 25, 2023 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade librbd1Upgrade librados2Upgrade python-radosUpgrade python-rbd | Feb 9, 2023 | Aug 25, 2022 |
| Redhat_linux | — | Upgrade librgw2-debuginfoUpgrade python3-rgwUpgrade libntirpc-debuginfoUpgrade ceph-baseUpgrade ceph-debugsourceUpgrade ceph-resource-agentsUpgrade nfs-ganesha-debugsourceUpgrade libcephfs2-debuginfoUpgrade ceph-fuse-debuginfoUpgrade python3-cephfsUpgrade nfs-ganesha-debuginfoUpgrade libtcmuUpgrade python3-cephfs-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade python3-rados-debuginfoUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade ceph-base-debuginfoUpgrade nfs-ganesha-vfsUpgrade cephadm-ansibleUpgrade libradosstriper1-debuginfoUpgrade nfs-ganesha-cephUpgrade librados-develUpgrade libcephfs-develUpgrade libcephsqlite-debuginfoUpgrade libcephfs2Upgrade python3-rgw-debuginfoUpgrade nfs-ganeshaUpgrade rbd-nbd-debuginfoUpgrade librgw-develUpgrade cephfs-mirrorUpgrade python3-ceph-argparseUpgrade ceph-radosgw-debuginfoUpgrade ceph-grafana-dashboardsUpgrade ceph-mdsUpgrade python3-rbdUpgrade ceph-mgr-debuginfoUpgrade nfs-ganesha-proxy-debuginfoUpgrade nfs-ganesha-rgw-debuginfoUpgrade libradospp-develUpgrade nfs-ganesha-rgwUpgrade ceph-common-debuginfoUpgrade librados-devel-debuginfoUpgrade libntirpcUpgrade python-cephfsUpgrade python3-radosUpgrade cephfs-topUpgrade cephfs-mirror-debuginfoUpgrade ceph-fuseUpgrade libradosstriper1Upgrade ceph-osd-debuginfoUpgrade ceph-ansibleUpgrade ceph-mon-debuginfoUpgrade python-ceph-argparseUpgrade ceph-mds-debuginfoUpgrade ceph-radosgwUpgrade cephadmUpgrade nfs-ganesha-rados-graceUpgrade nfs-ganesha-rados-urlsUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade python-rgwUpgrade ceph-commonUpgrade nfs-ganesha-ceph-debuginfoUpgrade rbd-fuse-debuginfoUpgrade ceph-immutable-object-cacheUpgrade nfs-ganesha-vfs-debuginfoUpgrade rbd-nbdUpgrade nfs-ganesha-selinuxUpgrade librgw2Upgrade python3-rbd-debuginfoUpgrade ceph-test-debuginfoUpgrade rbd-mirror-debuginfoUpgrade rbd-mirrorUpgrade librbd-develUpgrade python3-ceph-commonUpgrade ceph-debuginfoUpgrade ceph-selinuxUpgrade tcmu-runnerUpgrade nfs-ganesha-proxyUpgrade libntirpc-debugsourceUpgrade ceph-iscsi | Apr 5, 2022 | Apr 4, 2022 |
| Suse | — | Upgrade python3-radosUpgrade ceph-monUpgrade ceph-prometheus-alertsUpgrade ceph-mdsUpgrade librados-develUpgrade ceph-baseUpgrade python3-ceph-argparseUpgrade librbd1Upgrade python3-rbdUpgrade libradospp-develUpgrade ceph-mgr-dashboardUpgrade librgw2Upgrade libcephfs-develUpgrade ceph-mgr-modules-coreUpgrade libcephsqliteUpgrade python3-cephfsUpgrade rbd-mirrorUpgrade cephfs-shellUpgrade ceph-mgr-diskprediction-localUpgrade ceph-mgr-cephadmUpgrade cephUpgrade ceph-commonUpgrade rbd-nbdUpgrade ceph-testUpgrade libcephsqlite-develUpgrade ceph-mgr-rookUpgrade cephfs-topUpgrade ceph-mgr-k8seventsUpgrade cephadmUpgrade ceph-fuseUpgrade rados-objclass-develUpgrade ceph-immutable-object-cacheUpgrade ceph-osdUpgrade rbd-fuseUpgrade librados2Upgrade ceph-mgrUpgrade libcephfs2Upgrade ceph-radosgwUpgrade cephfs-mirrorUpgrade python3-ceph-commonUpgrade librgw-develUpgrade ceph-grafana-dashboardsUpgrade python3-rgwUpgrade librbd-develUpgrade libfmt8 | Oct 26, 2022 | Aug 25, 2022 |
| Ubuntu | — | Upgrade ceph-commonUpgrade cephUpgrade ceph-base | May 10, 2023 | Aug 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub