A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged information.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade ceph-mon-debuginfoUpgrade rbd-nbd-debuginfoUpgrade ceph-baseUpgrade ceph-test-debuginfoUpgrade libradospp-develUpgrade libradosstriper1-debuginfoUpgrade rbd-nbdUpgrade ceph-base-debuginfoUpgrade ceph-osd-debuginfoUpgrade rbd-mirrorUpgrade ceph-immutable-object-cacheUpgrade python3-rbd-debuginfoUpgrade ceph-selinuxUpgrade python3-rgw-debuginfoUpgrade python3-cephfs-debuginfoUpgrade python3-rbdUpgrade ceph-mgr-debuginfoUpgrade cephadm-ansibleUpgrade ceph-mibUpgrade ceph-mds-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade ceph-resource-agentsUpgrade libradosstriper1Upgrade rbd-mirror-debuginfoUpgrade python3-rgwUpgrade librgw2Upgrade cephfs-mirrorUpgrade librados-devel-debuginfoUpgrade ceph-radosgwUpgrade ceph-debugsourceUpgrade librbd-develUpgrade cephfs-mirror-debuginfoUpgrade libcephfs2Upgrade librados-develUpgrade python3-rados-debuginfoUpgrade python3-ceph-argparseUpgrade ceph-common-debuginfoUpgrade librgw-develUpgrade libcephfs-develUpgrade librgw2-debuginfoUpgrade ceph-fuse-debuginfoUpgrade python3-cephfsUpgrade ceph-mdsUpgrade ceph-fuseUpgrade rbd-fuse-debuginfoUpgrade python3-radosUpgrade python3-ceph-commonUpgrade cephfs-topUpgrade ceph-immutable-object-cache-debuginfoUpgrade ceph-grafana-dashboardsUpgrade libcephfs2-debuginfoUpgrade cephadmUpgrade ceph-commonUpgrade libcephsqlite-debuginfo | Mar 1, 2023 | Jan 17, 2023 |
| Debian | — | Upgrade ceph | Jul 30, 2024 | Jan 17, 2023 |
| Gentoo Linux | — | Upgrade sys-cluster/ceph. | Dec 27, 2023 | Jan 17, 2023 |
| Redhat_linux | — | Upgrade python3-cephfsUpgrade ceph-grafana-dashboardsUpgrade ceph-fuse-debuginfoUpgrade libcephfs-develUpgrade python3-ceph-commonUpgrade rbd-fuse-debuginfoUpgrade ceph-mdsUpgrade libcephfs2Upgrade libcephsqlite-debuginfoUpgrade python3-rgwUpgrade rbd-nbd-debuginfoUpgrade python3-cephfs-debuginfoUpgrade librados-develUpgrade cephfs-mirrorUpgrade ceph-debugsourceUpgrade ceph-commonUpgrade libcephfs2-debuginfoUpgrade python3-radosUpgrade librgw-develUpgrade ceph-radosgwUpgrade librados-devel-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade ceph-mds-debuginfoUpgrade librgw2Upgrade ceph-osd-debuginfoUpgrade ceph-base-debuginfoUpgrade cephadmUpgrade ceph-mgr-debuginfoUpgrade python3-rados-debuginfoUpgrade libradospp-develUpgrade librbd-develUpgrade ceph-common-debuginfoUpgrade librgw2-debuginfoUpgrade ceph-baseUpgrade python3-rgw-debuginfoUpgrade python3-rbd-debuginfoUpgrade ceph-test-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade ceph-fuseUpgrade cephfs-topUpgrade ceph-selinuxUpgrade python3-ceph-argparseUpgrade rbd-mirror-debuginfoUpgrade rbd-mirrorUpgrade cephfs-mirror-debuginfoUpgrade libradosstriper1-debuginfoUpgrade ceph-mibUpgrade ceph-resource-agentsUpgrade ceph-immutable-object-cacheUpgrade python3-rbdUpgrade rbd-nbdUpgrade ceph-mon-debuginfoUpgrade cephadm-ansibleUpgrade libradosstriper1 | Mar 1, 2023 | Jan 17, 2023 |
| Suse | — | Upgrade librados-develUpgrade rbd-fuseUpgrade ceph-monUpgrade python3-ceph-commonUpgrade ceph-mgr-dashboardUpgrade ceph-radosgwUpgrade ceph-mdsUpgrade cephadmUpgrade librbd1Upgrade ceph-immutable-object-cacheUpgrade cephfs-mirrorUpgrade libcephfs2Upgrade ceph-grafana-dashboardsUpgrade librados2Upgrade python3-radosUpgrade librgw2Upgrade python3-cephfsUpgrade cephfs-shellUpgrade libcephsqliteUpgrade python3-ceph-argparseUpgrade librbd-develUpgrade libcephfs-develUpgrade ceph-commonUpgrade librgw-develUpgrade cephUpgrade cephfs-topUpgrade rados-objclass-develUpgrade ceph-baseUpgrade ceph-mgr-cephadmUpgrade ceph-fuseUpgrade python3-rbdUpgrade rbd-nbdUpgrade ceph-prometheus-alertsUpgrade ceph-mgr-k8seventsUpgrade ceph-mgr-rookUpgrade ceph-mgr-diskprediction-localUpgrade ceph-testUpgrade ceph-osdUpgrade rbd-mirrorUpgrade ceph-mgr-modules-coreUpgrade python3-rgwUpgrade ceph-mgrUpgrade libcephsqlite-develUpgrade libradospp-devel | Mar 28, 2023 | Jan 17, 2023 |
| Ubuntu | — | Upgrade cephUpgrade ceph-commonUpgrade ceph-base | May 10, 2023 | Jan 17, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub