CVE-2018-14662
Fixed in a distro release EPSS <1%CVSS 3.5
It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption.
Products: redhat ceph, debian_linux, opensuse leap, redhat ceph_storage, redhat enterprise_linux_server, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | ceph | 12.2.11+dfsg1-1 |
| Debian 13 | ceph | 12.2.11+dfsg1-1 |
| Debian 14 | ceph | 12.2.11+dfsg1-1 |
| Debian 8 | ceph | 0.80.7-2+deb8u3 |
| Debian 9 | ceph | 10.2.11-2+deb9u1 |
| Red Hat ceph storage 3 | ceph | 2:12.2.12-45.el7cp |
| Red Hat ceph storage 3 | ceph-ansible | 0:3.2.24-1.el7cp |
| Red Hat ceph storage 3 | ceph-base | 2:12.2.12-45.el7cp |
| Red Hat ceph storage 3 | ceph-common | 2:12.2.12-45.el7cp |
| Red Hat ceph storage 3 | ceph-debuginfo | 2:12.2.12-45.el7cp |
| Red Hat ceph storage 3 | ceph-fuse | 2:12.2.12-45.el7cp |
| Red Hat ceph storage 3 | ceph-iscsi-config | 0:2.6-19.el7cp |
| Red Hat ceph storage 3 | ceph-mds | 2:12.2.12-45.el7cp |
| Red Hat ceph storage 3 | ceph-mgr | 2:12.2.12-45.el7cp |
| Red Hat ceph storage 3 | ceph-mon | 2:12.2.12-45.el7cp |
| Red Hat ceph storage 3 | ceph-osd | 2:12.2.12-45.el7cp |
| Red Hat ceph storage 3 | ceph-radosgw | 2:12.2.12-45.el7cp |
| Red Hat ceph storage 3 | ceph-selinux | 2:12.2.12-45.el7cp |
| Red Hat ceph storage 3 | ceph-test | 2:12.2.12-45.el7cp |
| Red Hat ceph storage 3 | cephmetrics | 0:2.0.6-1.el7cp |
| Red Hat ceph storage 3 | cephmetrics-ansible | 0:2.0.6-1.el7cp |
| Red Hat ceph storage 3 | libcephfs-devel | 2:12.2.12-45.el7cp |
| Red Hat ceph storage 3 | libcephfs2 | 2:12.2.12-45.el7cp |
| Red Hat ceph storage 3 | libntirpc | 0:1.7.4-1.el7cp |
| Red Hat ceph storage 3 | libntirpc-debuginfo | 0:1.7.4-1.el7cp |
| Red Hat ceph storage 3 | librados-devel | 2:12.2.12-45.el7cp |
| Red Hat ceph storage 3 | librados2 | 2:12.2.12-45.el7cp |
| Red Hat ceph storage 3 | libradosstriper1 | 2:12.2.12-45.el7cp |
| Red Hat ceph storage 3 | librbd-devel | 2:12.2.12-45.el7cp |
| Red Hat ceph storage 3 | librbd1 | 2:12.2.12-45.el7cp |
| Red Hat ceph storage 3 | librgw-devel | 2:12.2.12-45.el7cp |
| Red Hat ceph storage 3 | librgw2 | 2:12.2.12-45.el7cp |
| Red Hat ceph storage 3 | nfs-ganesha | 0:2.7.4-10.el7cp |
| Red Hat ceph storage 3 | nfs-ganesha-ceph | 0:2.7.4-10.el7cp |
| Red Hat ceph storage 3 | nfs-ganesha-debuginfo | 0:2.7.4-10.el7cp |
| Red Hat ceph storage 3 | nfs-ganesha-rgw | 0:2.7.4-10.el7cp |
| Red Hat ceph storage 3 | python-cephfs | 2:12.2.12-45.el7cp |
| Red Hat ceph storage 3 | python-crypto | 0:2.6.1-16.el7ost |
| Red Hat ceph storage 3 | python-crypto-debuginfo | 0:2.6.1-16.el7ost |
| Red Hat ceph storage 3 | python-rados | 2:12.2.12-45.el7cp |
| Red Hat ceph storage 3 | python-rbd | 2:12.2.12-45.el7cp |
| Red Hat ceph storage 3 | python-rgw | 2:12.2.12-45.el7cp |
| Red Hat ceph storage 3 | python2-crypto | 0:2.6.1-16.el7ost |
| Red Hat ceph storage 3 | rbd-mirror | 2:12.2.12-45.el7cp |
| SUSE Enterprise Storage 5 | ceph | 12.2.10+git.1549630712.bb089269ea-2.27.2 |
| SUSE Linux Enterprise Desktop 12 SP3 | ceph | 12.2.10+git.1549630712.bb089269ea-2.27.2 |
| SUSE Linux Enterprise Desktop 12 SP4 | ceph | 12.2.10+git.1549630712.bb089269ea-2.27.2 |
| SUSE Linux Enterprise Module for Basesystem 15 | ceph | 13.2.4.125+gad802694f5-3.7.2 |
| SUSE Linux Enterprise Server 12 SP3 | ceph | 12.2.10+git.1549630712.bb089269ea-2.27.2 |
| SUSE Linux Enterprise Server 12 SP4 | ceph | 12.2.10+git.1549630712.bb089269ea-2.27.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | ceph | 12.2.10+git.1549630712.bb089269ea-2.27.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | ceph | 12.2.10+git.1549630712.bb089269ea-2.27.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | ceph | 12.2.10+git.1549630712.bb089269ea-2.27.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | ceph | 12.2.10+git.1549630712.bb089269ea-2.27.2 |
| Ubuntu 16.04 LTS | ceph | 10.2.11-0ubuntu0.16.04.2 |
| Ubuntu 18.04 LTS | ceph | 12.2.11-0ubuntu0.18.04.1 |
| Ubuntu Pro 14.04 LTS | ceph | 0.80.11-0ubuntu1.14.04.4+esm3 |
| Ubuntu Pro 16.04 LTS | ceph | 10.2.11-0ubuntu0.16.04.3+esm2 |
| openSUSE Leap 15.0 | ceph | 13.2.4.125+gad802694f5-lp150.2.3.1 |
| openSUSE Leap 15.0 | ceph-test | 13.2.4.125+gad802694f5-lp150.2.3.1 |