Skip to content
OpenAdvisories
Unscored CVE-2018-1129 EUVD-2018-11773GHSA-7qc9-w55v-w7p3

A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster n…

Published Jul 10, 2018 · Updated Sep 17, 2024 · Assigned by redhat

Vendor: Red Hat Product: ceph Package: ceph Package: ceph Package: linux Ecosystem: Azure Linux Ecosystem: Debian

Description

A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.

Affected products

VendorProductAffectedFixed
Red Hat ceph all versions in branches master, mimic, luminous and jewel —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 ceph 12.2.8+dfsg1-1 —
Debian 14 linux 4.19.9-1 —
Debian 13 ceph 12.2.8+dfsg1-1 —
Debian 13 linux 4.19.9-1 —
Debian 12 ceph 12.2.8+dfsg1-1 —
Debian 12 linux 4.19.9-1 —
Debian 9 ceph 10.2.11-1 DSA-4339-1
Debian 8 linux-4.9 4.9.144-3.1~deb8u1 DLA-1715-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
Red Hat Ceph Storage 3 ceph +24 2:12.2.4-30.el7cp RHSA-2018:2177
Red Hat Ceph Storage 3 ceph-ansible 3.0.39-1.el7cp RHSA-2018:2177
Red Hat Ceph Storage 3 cephmetrics +3 1.0.1-1.el7cp RHSA-2018:2177
Red Hat Ceph Storage 3 nfs-ganesha +2 2.5.5-6.el7cp RHSA-2018:2177
Red Hat Ceph Storage 2 ceph +21 2:10.2.10-28.el7cp RHSA-2018:2261
Red Hat Ceph Storage 2 ceph-ansible 3.0.39-1.el7cp RHSA-2018:2261

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 ceph 13.2.4.125+gad802694f5-3.7.2 SUSE-SU-2019:0586-1
SLES 15 kernel-azure +2 4.12.14-5.16.1 SUSE-SU-2018:3961-1
SLES 15 kernel-docs +6 4.12.14-25.19.1 SUSE-SU-2018:2980-1
SLES 12 SP3 ceph 12.2.7+git.1531910353.c0ef85b854-2.12.1 SUSE-SU-2018:2478-1, SUSE-SU-2018:2193-1
SLES 12 SP3 kernel-azure +3 4.4.155-4.16.1 SUSE-SU-2018:2858-1
SLES 12 SP3 kernel-docs +4 4.4.155-94.50.1 SUSE-SU-2018:2776-1
SLES 12 SP2 kernel-syms +2 4.4.121-92.109.2 SUSE-SU-2019:1287-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_29 1-3.5.2 SUSE-SU-2019:1287-1
Show 8 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 12 SP3 ceph 12.2.7+git.1531910353.c0ef85b854-2.12.1 SUSE-SU-2018:2478-1, SUSE-SU-2018:2193-1
SLES for SAP 12 SP3 kernel-azure +2 4.4.155-4.16.1 SUSE-SU-2018:2858-1
SLES for SAP 12 SP3 kernel-syms +2 4.4.155-94.50.1 SUSE-SU-2018:2776-1
SLES for SAP 12 SP2 kernel-syms +2 4.4.121-92.109.2 SUSE-SU-2019:1287-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_29 1-3.5.2 SUSE-SU-2019:1287-1
SLE Real Time 12 SP3 kernel-rt +3 4.4.155-3.23.1 SUSE-SU-2018:2862-1
SLE Live Patching 15 kernel-default 4.12.14-25.19.1 SUSE-SU-2018:2981-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_5 1-1.3.1 SUSE-SU-2018:2981-1
SLE Live Patching 12 SP3 kgraft-patch-SLE12-SP3_Update_17 1-4.3.1 SUSE-SU-2018:2775-1
SUSE OpenStack Cloud 7 kernel-syms +2 4.4.121-92.109.2 SUSE-SU-2019:1287-1
SUSE OpenStack Cloud 7 kgraft-patch-SLE12-SP2_Update_29 1-3.5.2 SUSE-SU-2019:1287-1
SUSE Enterprise Storage 5 ceph 12.2.5+git.1530082629.8cbf63d997-2.16.1 SUSE-SU-2018:1920-1
SUSE Enterprise Storage 4 ceph +1 10.2.11+git.1531487710.3a12911a2e-12.14.2 SUSE-SU-2018:2299-1
SUSE Enterprise Storage 4 kernel-syms +2 4.4.121-92.109.2 SUSE-SU-2019:1287-1
SUSE Enterprise Storage 4 kgraft-patch-SLE12-SP2_Update_29 1-3.5.2 SUSE-SU-2019:1287-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Leap 15.0 ceph +1 13.2.4.125+gad802694f5-lp150.2.3.1 openSUSE-SU-2019:1284-1

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 ceph 18.2.1-1 —

Advisories 19

References