Vulnerability Description
A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Ceph Storage | 1.3 |
| Redhat | Ceph Storage Mon | 2 |
| Redhat | Ceph Storage Osd | 2 |
| Redhat | Enterprise Linux | 7.0 |
| Redhat | Enterprise Linux Desktop | 7.0 |
| Redhat | Enterprise Linux Server | 7.0 |
| Redhat | Enterprise Linux Workstation | 7.0 |
| Ceph | Ceph | 10.2.0 |
| Debian | Debian Linux | 8.0 |
| Opensuse | Leap | 15.0 |
Related Weaknesses (CWE)
References
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00100.htmlThird Party Advisory
- http://packetstormsecurity.com/files/154245/Kernel-Live-Patch-Security-Notice-LS
- http://tracker.ceph.com/issues/24837Issue TrackingVendor Advisory
- https://access.redhat.com/errata/RHSA-2018:2177Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2179Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2261Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2274Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1576057Issue TrackingPatchThird Party Advisory
- https://github.com/ceph/ceph/commit/8f396cf35a3826044b089141667a196454c0a587PatchThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/03/msg00017.htmlMailing ListThird Party Advisory
- https://www.debian.org/security/2018/dsa-4339Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00100.htmlThird Party Advisory
- http://packetstormsecurity.com/files/154245/Kernel-Live-Patch-Security-Notice-LS
- http://tracker.ceph.com/issues/24837Issue TrackingVendor Advisory
- https://access.redhat.com/errata/RHSA-2018:2177Third Party Advisory
FAQ
What is CVE-2018-1129?
CVE-2018-1129 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to b...
How severe is CVE-2018-1129?
CVE-2018-1129 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-1129?
Check the references section above for vendor advisories and patch information. Affected products include: Redhat Ceph Storage, Redhat Ceph Storage Mon, Redhat Ceph Storage Osd, Redhat Enterprise Linux, Redhat Enterprise Linux Desktop.