A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged information.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade cephadm-ansibleUpgrade ceph-immutable-object-cacheUpgrade rbd-mirrorUpgrade ceph-mds-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade ceph-baseUpgrade ceph-resource-agentsUpgrade ceph-test-debuginfoUpgrade libradospp-develUpgrade rbd-mirror-debuginfoUpgrade ceph-mibUpgrade python3-rgwUpgrade libradosstriper1Upgrade python3-rbdUpgrade libradosstriper1-debuginfoUpgrade ceph-selinuxUpgrade python3-rgw-debuginfoUpgrade python3-rbd-debuginfoUpgrade rbd-nbd-debuginfoUpgrade ceph-mon-debuginfoUpgrade ceph-mgr-debuginfoUpgrade ceph-osd-debuginfoUpgrade python3-cephfs-debuginfoUpgrade rbd-nbdUpgrade ceph-base-debuginfoUpgrade ceph-commonUpgrade libcephsqlite-debuginfoUpgrade cephfs-mirrorUpgrade librados-devel-debuginfoUpgrade ceph-radosgwUpgrade ceph-debugsourceUpgrade librbd-develUpgrade libcephfs2Upgrade cephfs-mirror-debuginfoUpgrade libcephfs-develUpgrade python3-ceph-argparseUpgrade ceph-common-debuginfoUpgrade librgw2-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade ceph-grafana-dashboardsUpgrade libcephfs2-debuginfoUpgrade python3-radosUpgrade python3-cephfsUpgrade rbd-fuse-debuginfoUpgrade ceph-fuse-debuginfoUpgrade ceph-fuseUpgrade ceph-mdsUpgrade cephfs-topUpgrade python3-rados-debuginfoUpgrade python3-ceph-commonUpgrade librgw2Upgrade librados-develUpgrade librgw-develUpgrade cephadm | Mar 1, 2023 | Jan 17, 2023 |
| Debian | — | Upgrade ceph | Jul 30, 2024 | Jan 17, 2023 |
| Gentoo Linux | — | Upgrade sys-cluster/ceph. | Dec 27, 2023 | Jan 17, 2023 |
| Redhat_linux | — | Upgrade librados-devel-debuginfoUpgrade python3-rgwUpgrade ceph-mds-debuginfoUpgrade libcephsqlite-debuginfoUpgrade rbd-fuse-debuginfoUpgrade cephfs-mirrorUpgrade ceph-mdsUpgrade librados-develUpgrade python3-cephfs-debuginfoUpgrade ceph-grafana-dashboardsUpgrade librgw-develUpgrade ceph-fuse-debuginfoUpgrade python3-cephfsUpgrade python3-ceph-commonUpgrade rbd-nbd-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade ceph-radosgwUpgrade libcephfs2Upgrade python3-radosUpgrade ceph-commonUpgrade ceph-debugsourceUpgrade libcephfs-develUpgrade libcephfs2-debuginfoUpgrade ceph-mibUpgrade libradospp-develUpgrade rbd-mirror-debuginfoUpgrade ceph-resource-agentsUpgrade cephfs-mirror-debuginfoUpgrade libradosstriper1-debuginfoUpgrade python3-rbd-debuginfoUpgrade cephfs-topUpgrade cephadmUpgrade python3-rados-debuginfoUpgrade cephadm-ansibleUpgrade librbd-develUpgrade ceph-baseUpgrade ceph-fuseUpgrade ceph-immutable-object-cacheUpgrade rbd-nbdUpgrade libradosstriper1Upgrade ceph-mgr-debuginfoUpgrade ceph-common-debuginfoUpgrade python3-rgw-debuginfoUpgrade librgw2-debuginfoUpgrade ceph-base-debuginfoUpgrade python3-rbdUpgrade ceph-mon-debuginfoUpgrade ceph-selinuxUpgrade librgw2Upgrade ceph-test-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade rbd-mirrorUpgrade python3-ceph-argparseUpgrade ceph-osd-debuginfo | Mar 1, 2023 | Jan 17, 2023 |
| Suse | — | Upgrade python3-cephfsUpgrade python3-ceph-argparseUpgrade ceph-mdsUpgrade librados2Upgrade libcephsqliteUpgrade python3-ceph-commonUpgrade ceph-mgr-dashboardUpgrade ceph-monUpgrade librgw2Upgrade ceph-commonUpgrade librgw-develUpgrade libcephfs-develUpgrade ceph-immutable-object-cacheUpgrade ceph-grafana-dashboardsUpgrade cephfs-shellUpgrade ceph-radosgwUpgrade librados-develUpgrade cephadmUpgrade libcephfs2Upgrade librbd1Upgrade cephfs-mirrorUpgrade rbd-fuseUpgrade librbd-develUpgrade python3-radosUpgrade ceph-mgr-rookUpgrade ceph-baseUpgrade ceph-mgr-cephadmUpgrade ceph-mgr-modules-coreUpgrade rados-objclass-develUpgrade ceph-mgr-k8seventsUpgrade rbd-mirrorUpgrade ceph-testUpgrade cephfs-topUpgrade ceph-prometheus-alertsUpgrade rbd-nbdUpgrade ceph-fuseUpgrade python3-rbdUpgrade ceph-osdUpgrade cephUpgrade libradospp-develUpgrade libcephsqlite-develUpgrade ceph-mgrUpgrade python3-rgwUpgrade ceph-mgr-diskprediction-local | Mar 28, 2023 | Jan 17, 2023 |
| Ubuntu | — | Upgrade ceph-commonUpgrade cephUpgrade ceph-base | May 10, 2023 | Jan 17, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub