Description
A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | ceph | all versions in branches master, mimic, luminous and jewel | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | ceph | 12.2.8+dfsg1-1 | — |
| Debian 13 | ceph | 12.2.8+dfsg1-1 | — |
| Debian 12 | ceph | 12.2.8+dfsg1-1 | — |
| Debian 9 | ceph | 10.2.11-1 | DSA-4339-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 14.04 LTS | ceph | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Ceph Storage 3 | ceph +24 | 2:12.2.4-30.el7cp | RHSA-2018:2177 |
| Red Hat Ceph Storage 3 | ceph-ansible | 3.0.39-1.el7cp | RHSA-2018:2177 |
| Red Hat Ceph Storage 3 | cephmetrics +3 | 1.0.1-1.el7cp | RHSA-2018:2177 |
| Red Hat Ceph Storage 3 | nfs-ganesha +2 | 2.5.5-6.el7cp | RHSA-2018:2177 |
| Red Hat Ceph Storage 2 | ceph +21 | 2:10.2.10-28.el7cp | RHSA-2018:2261 |
| Red Hat Ceph Storage 2 | ceph-ansible | 3.0.39-1.el7cp | RHSA-2018:2261 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 | ceph | 13.2.4.125+gad802694f5-3.7.2 | SUSE-SU-2019:0586-1 |
| SLES 12 SP3 | ceph | 12.2.7+git.1531910353.c0ef85b854-2.12.1 | SUSE-SU-2018:2478-1, SUSE-SU-2018:2193-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP3 | ceph | 12.2.7+git.1531910353.c0ef85b854-2.12.1 | SUSE-SU-2018:2478-1, SUSE-SU-2018:2193-1 |
| SUSE Enterprise Storage 5 | ceph | 12.2.5+git.1530082629.8cbf63d997-2.16.1 | SUSE-SU-2018:1920-1 |
| SUSE Enterprise Storage 4 | ceph +1 | 10.2.11+git.1531487710.3a12911a2e-12.14.2 | SUSE-SU-2018:2299-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.0 | ceph +1 | 13.2.4.125+gad802694f5-lp150.2.3.1 | openSUSE-SU-2019:1284-1 |
Advisories 9
- RHSA-2018:2261 Red Hat Security Advisory: Red Hat Ceph Storage 2.5 security, enhancement, and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2018:2177 Red Hat Security Advisory: Red Hat Ceph Storage 3.0 security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- DSA-4339-1 ceph - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2018:2193-1 Security update for ceph SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:2478-1 Security update for ceph SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:0586-1 Security update for ceph SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:1284-1 Security update for ceph SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2018:1920-1 Security update for ceph SUSE / openSUSE Security Updates · May 2, 2025
- SUSE-SU-2018:2299-1 Security update for ceph SUSE / openSUSE Security Updates · May 2, 2025
References
- RHSA-2018:2261 vendor-advisory
- RHSA-2018:2177 vendor-advisory
- RHSA-2018:2179 vendor-advisory
- RHSA-2018:2274 vendor-advisory
- 104742 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1593308
- https://github.com/ceph/ceph/commit/975528f632f73fbffa3f1fee304e3bbe3296cffc
- DSA-4339 vendor-advisory
- http://tracker.ceph.com/issues/24838
- openSUSE-SU-2019:1284 vendor-advisory