A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged information.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade ceph-mon-debuginfoUpgrade python3-rbdUpgrade ceph-resource-agentsUpgrade python3-rbd-debuginfoUpgrade rbd-nbd-debuginfoUpgrade libradosstriper1Upgrade ceph-test-debuginfoUpgrade cephadm-ansibleUpgrade ceph-mds-debuginfoUpgrade libradospp-develUpgrade ceph-baseUpgrade ceph-mgr-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade libradosstriper1-debuginfoUpgrade ceph-mibUpgrade ceph-immutable-object-cacheUpgrade rbd-mirrorUpgrade ceph-base-debuginfoUpgrade ceph-osd-debuginfoUpgrade rbd-nbdUpgrade python3-cephfs-debuginfoUpgrade ceph-selinuxUpgrade python3-rgw-debuginfoUpgrade rbd-mirror-debuginfoUpgrade python3-rgwUpgrade cephfs-mirror-debuginfoUpgrade python3-ceph-argparseUpgrade python3-rados-debuginfoUpgrade librgw-develUpgrade libcephfs-develUpgrade ceph-common-debuginfoUpgrade librgw2-debuginfoUpgrade cephfs-topUpgrade librgw2Upgrade librados-develUpgrade libcephfs2-debuginfoUpgrade python3-radosUpgrade python3-cephfsUpgrade python3-ceph-commonUpgrade ceph-mdsUpgrade ceph-fuse-debuginfoUpgrade ceph-fuseUpgrade rbd-fuse-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade ceph-grafana-dashboardsUpgrade libcephsqlite-debuginfoUpgrade cephadmUpgrade ceph-commonUpgrade cephfs-mirrorUpgrade librados-devel-debuginfoUpgrade ceph-radosgwUpgrade ceph-debugsourceUpgrade librbd-develUpgrade libcephfs2 | Mar 1, 2023 | Jan 17, 2023 |
| Debian | — | Upgrade ceph | Jul 30, 2024 | Jan 17, 2023 |
| Gentoo Linux | — | Upgrade sys-cluster/ceph. | Dec 27, 2023 | Jan 17, 2023 |
| Redhat_linux | — | Upgrade ceph-fuseUpgrade python3-rbd-debuginfoUpgrade ceph-mibUpgrade ceph-resource-agentsUpgrade librgw2Upgrade python3-ceph-argparseUpgrade libradosstriper1-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade rbd-mirror-debuginfoUpgrade ceph-test-debuginfoUpgrade ceph-common-debuginfoUpgrade python3-rados-debuginfoUpgrade rbd-mirrorUpgrade ceph-mgr-debuginfoUpgrade ceph-base-debuginfoUpgrade ceph-baseUpgrade librbd-develUpgrade libradospp-develUpgrade cephadmUpgrade librgw2-debuginfoUpgrade ceph-osd-debuginfoUpgrade cephadm-ansibleUpgrade python3-rgw-debuginfoUpgrade rbd-nbdUpgrade libradosstriper1Upgrade ceph-mon-debuginfoUpgrade cephfs-topUpgrade python3-rbdUpgrade ceph-selinuxUpgrade ceph-immutable-object-cacheUpgrade libcephfs2-debuginfoUpgrade librgw-develUpgrade python3-rgwUpgrade cephfs-mirrorUpgrade librados-devel-debuginfoUpgrade ceph-commonUpgrade ceph-immutable-object-cache-debuginfoUpgrade ceph-mdsUpgrade librados-develUpgrade libcephfs2Upgrade ceph-debugsourceUpgrade libcephsqlite-debuginfoUpgrade python3-ceph-commonUpgrade libcephfs-develUpgrade ceph-fuse-debuginfoUpgrade ceph-grafana-dashboardsUpgrade python3-cephfs-debuginfoUpgrade rbd-nbd-debuginfoUpgrade python3-cephfsUpgrade ceph-mds-debuginfoUpgrade rbd-fuse-debuginfoUpgrade ceph-radosgwUpgrade python3-rados | Mar 1, 2023 | Jan 17, 2023 |
| Suse | — | Upgrade libradospp-develUpgrade ceph-mgr-diskprediction-localUpgrade libcephsqlite-develUpgrade ceph-mgr-cephadmUpgrade python3-rgwUpgrade cephUpgrade ceph-osdUpgrade ceph-fuseUpgrade ceph-mgrUpgrade ceph-mgr-modules-coreUpgrade rbd-nbdUpgrade ceph-mgr-k8seventsUpgrade ceph-mgr-rookUpgrade python3-rbdUpgrade ceph-testUpgrade rados-objclass-develUpgrade ceph-baseUpgrade cephfs-topUpgrade rbd-mirrorUpgrade ceph-prometheus-alertsUpgrade cephfs-shellUpgrade libcephfs2Upgrade ceph-mdsUpgrade rbd-fuseUpgrade librgw2Upgrade python3-cephfsUpgrade python3-ceph-commonUpgrade ceph-mgr-dashboardUpgrade librados2Upgrade ceph-commonUpgrade librgw-develUpgrade python3-ceph-argparseUpgrade ceph-radosgwUpgrade cephadmUpgrade python3-radosUpgrade librbd1Upgrade librbd-develUpgrade libcephsqliteUpgrade ceph-monUpgrade ceph-grafana-dashboardsUpgrade libcephfs-develUpgrade ceph-immutable-object-cacheUpgrade librados-develUpgrade cephfs-mirror | Mar 28, 2023 | Jan 17, 2023 |
| Ubuntu | — | Upgrade ceph-baseUpgrade ceph-commonUpgrade ceph | May 10, 2023 | Jan 17, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub