CVEvulnerability
CVE-2018-1128
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-07-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 5.4 MEDIUM — AV:A/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-287, CWE-294
Description
It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network can use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.
Affected configurations
• redhat ceph storage 3
• redhat ceph storage mon 2
• redhat ceph storage mon 3
• redhat ceph storage osd 2
• redhat ceph storage osd 3
• redhat enterprise linux 7.0
• redhat enterprise linux desktop 7.0
• redhat enterprise linux server 7.0
• redhat enterprise linux workstation 7.0
• redhat ceph (>= 10.2.0 <= 13.2.1)
• debian debian linux 8.0
• debian debian linux 9.0
• opensuse leap 15.0
Related
References
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00100.html Third Party Advisory
- http://tracker.ceph.com/issues/24836 Issue Tracking, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2020/11/17/3 www.openwall.com
- http://www.openwall.com/lists/oss-security/2020/11/17/4 www.openwall.com
- https://access.redhat.com/errata/RHSA-2018:2177 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2179 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2261 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2274 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1575866 Issue Tracking, Patch, Third Party Advisory
- https://github.com/ceph/ceph/commit/5ead97120e07054d80623dada90a5cc764c28468 Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html Mailing List, Third Party Advisory
- https://www.debian.org/security/2018/dsa-4339 Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00100.html Third Party Advisory
- http://tracker.ceph.com/issues/24836 Issue Tracking, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2020/11/17/3 www.openwall.com
- http://www.openwall.com/lists/oss-security/2020/11/17/4 www.openwall.com
- https://access.redhat.com/errata/RHSA-2018:2177 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2179 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2261 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2274 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1575866 Issue Tracking, Patch, Third Party Advisory
- https://github.com/ceph/ceph/commit/5ead97120e07054d80623dada90a5cc764c28468 Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html Mailing List, Third Party Advisory
- https://www.debian.org/security/2018/dsa-4339 Third Party Advisory