CVE-2018-1129 A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to b...
MediumCVSS 6.5
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ceph(Debian:12) | < 12.2.8+dfsg1-1 | 12.2.8+dfsg1-1 |
| debian/ceph(Debian:13) | < 12.2.8+dfsg1-1 | 12.2.8+dfsg1-1 |
| debian/ceph(Debian:14) | < 12.2.8+dfsg1-1 | 12.2.8+dfsg1-1 |
| debian/linux(Debian:12) | < 4.19.9-1 | 4.19.9-1 |
| debian/linux(Debian:13) | < 4.19.9-1 | 4.19.9-1 |
| debian/linux(Debian:14) | < 4.19.9-1 | 4.19.9-1 |
| redhat ceph storage | = 1.3 | No fix listed |
| redhat ceph storage | = 3 | No fix listed |
| redhat ceph storage mon | = 2 | No fix listed |
| redhat ceph storage mon | = 3 | No fix listed |
| redhat ceph storage osd | = 2 | No fix listed |
| redhat ceph storage osd | = 3 | No fix listed |
| redhat enterprise linux | = 7.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| ceph | = 10.2.0 | No fix listed |
| ceph | = 10.2.1 | No fix listed |
| ceph | = 10.2.2 | No fix listed |
| ceph | = 10.2.3 | No fix listed |
| ceph | = 10.2.4 | No fix listed |
| ceph | = 10.2.5 | No fix listed |
| ceph | = 10.2.6 | No fix listed |
| ceph | = 10.2.7 | No fix listed |
| ceph | = 10.2.8 | No fix listed |
Show 17 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ceph | = 10.2.9 | No fix listed |
| ceph | = 10.2.10 | No fix listed |
| ceph | = 10.2.11 | No fix listed |
| ceph | = 12.2.0 | No fix listed |
| ceph | = 12.2.1 | No fix listed |
| ceph | = 12.2.2 | No fix listed |
| ceph | = 12.2.3 | No fix listed |
| ceph | = 12.2.4 | No fix listed |
| ceph | = 12.2.5 | No fix listed |
| ceph | = 12.2.6 | No fix listed |
| ceph | = 12.2.7 | No fix listed |
| ceph | = 13.2.0 | No fix listed |
| ceph | = 13.2.1 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| openSUSE leap | = 15.0 | No fix listed |
| redhat/ceph | = all versions in branches master, mimic, luminous and jewel | No fix listed |
References
- Debian Security Tracker CVE-2018-1129 vendor-advisory
- openSUSE-SU-2019:1284 third-party-advisory vendor-advisory
- packetstormsecurity.com
- tracker.ceph.com issue-tracking vendor-advisory
- RHSA-2018:2177 third-party-advisory vendor-advisory
- RHSA-2018:2179 third-party-advisory vendor-advisory
- RHSA-2018:2261 third-party-advisory vendor-advisory
- RHSA-2018:2274 third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking patch third-party-advisory
- github.com patch third-party-advisory
- [debian-lts-announce] 20190315 [SECURITY] [DLA 1715-1] linux-4.9 security update mailing-list third-party-advisory
- DSA-4339 third-party-advisory vendor-advisory
- bugs.debian.org issue-tracking