Description
A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| The Ceph Project | ceph | Red Hat Ceph Storage 4, Red Hat Openshift Container Storage 4.2 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | ceph | 14.2.9-1 | — |
| Debian 13 | ceph | 14.2.9-1 | — |
| Debian 12 | ceph | 14.2.9-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Ceph Storage 4 | ceph +32 | 2:14.2.8-111.el7cp | RHBA-2020:4144 |
| Red Hat Ceph Storage 4 | ceph-ansible | 4.0.31-1.el7cp | RHBA-2020:4144 |
| Red Hat Ceph Storage 4 | python3-rbd +4 | 2:14.2.8-111.el8cp | RHBA-2020:4144 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP1 | ceph | 14.2.5.389+gb0f23ac248-3.35.2 | SUSE-SU-2020:0930-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE Enterprise Storage 6 | ceph | 14.2.5.389+gb0f23ac248-3.35.2 | SUSE-SU-2020:0930-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.1 | ceph +1 | 14.2.5.389+gb0f23ac248-lp151.2.13.1 | openSUSE-SU-2020:0494-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.18 | ceph16 | 14.2.9-r0 | — |
| Alpine v3.17 | ceph16 | 14.2.9-r0 | — |
| Alpine v3.16 | ceph | 14.2.9-r0 | — |
| Alpine v3.15 | ceph | 14.2.9-r0 | — |
| Alpine v3.14 | ceph | 14.2.9-r0 | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.13 | ceph | 14.2.9-r0 | — |
| Alpine v3.12 | ceph | 14.2.9-r0 | — |
| Alpine v3.11 | ceph | 14.2.9-r0 | — |
| Alpine v3.10 | ceph | 14.2.9-r0 | — |
Advisories 3
- RHBA-2020:4144 Red Hat Bug Fix Advisory: Red Hat Ceph Storage 4.1 Bug Fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- SUSE-SU-2020:0930-1 Security update for ceph SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:0494-1 Security update for ceph SUSE / openSUSE Security Updates · Feb 4, 2026
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1759
- FEDORA-2020-81b9c6cddc vendor-advisory
- GLSA-202105-39 vendor-advisory