Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-27781

Fixed in a distro release EPSS <1%

User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential privilege escalation. An Open Stack Manila user can request access to a share to an arbitrary cephx user, including existing users. The access key is retrieved via the interface drivers. Then, all users of the requesting OpenStack project can view the access key. This enables the attacker to target any resource that the user has access to. This can be done to even "admin" users, compromising the ceph administrator. This flaw affects Ceph versions prior to 14.2.16, 15.x prior to 15.2.8, and 16.x prior to 16.2.0.

Published 2020-12-18 · CVE record · OSV

Products: redhat ceph, redhat ceph_storage, redhat openshift_container_platform, redhat openstack_platform, fedoraproject fedora

Distro releases

ReleasePackageFixed in
Debian 10ceph12.2.11+dfsg1-2.1+deb10u1
Debian 12ceph14.2.16-1
Debian 13ceph14.2.16-1
Debian 14ceph14.2.16-1
Red Hat ceph storage 3ceph2:12.2.12-139.el7cp
Red Hat ceph storage 3ceph-ansible0:3.2.56-1.el7cp
Red Hat ceph storage 3ceph-base2:12.2.12-139.el7cp
Red Hat ceph storage 3ceph-common2:12.2.12-139.el7cp
Red Hat ceph storage 3ceph-debuginfo2:12.2.12-139.el7cp
Red Hat ceph storage 3ceph-fuse2:12.2.12-139.el7cp
Red Hat ceph storage 3ceph-mds2:12.2.12-139.el7cp
Red Hat ceph storage 3ceph-mgr2:12.2.12-139.el7cp
Red Hat ceph storage 3ceph-mon2:12.2.12-139.el7cp
Red Hat ceph storage 3ceph-osd2:12.2.12-139.el7cp
Red Hat ceph storage 3ceph-radosgw2:12.2.12-139.el7cp
Red Hat ceph storage 3ceph-selinux2:12.2.12-139.el7cp
Red Hat ceph storage 3ceph-test2:12.2.12-139.el7cp
Red Hat ceph storage 3cephmetrics0:2.0.10-1.el7cp
Red Hat ceph storage 3cephmetrics-ansible0:2.0.10-1.el7cp
Red Hat ceph storage 3grafana0:5.2.4-3.el7cp
Red Hat ceph storage 3libcephfs-devel2:12.2.12-139.el7cp
Red Hat ceph storage 3libcephfs22:12.2.12-139.el7cp
Red Hat ceph storage 3librados-devel2:12.2.12-139.el7cp
Red Hat ceph storage 3librados22:12.2.12-139.el7cp
Red Hat ceph storage 3libradosstriper12:12.2.12-139.el7cp
Red Hat ceph storage 3librbd-devel2:12.2.12-139.el7cp
Red Hat ceph storage 3librbd12:12.2.12-139.el7cp
Red Hat ceph storage 3librgw-devel2:12.2.12-139.el7cp
Red Hat ceph storage 3librgw22:12.2.12-139.el7cp
Red Hat ceph storage 3python-cephfs2:12.2.12-139.el7cp
Red Hat ceph storage 3python-rados2:12.2.12-139.el7cp
Red Hat ceph storage 3python-rbd2:12.2.12-139.el7cp
Red Hat ceph storage 3python-rgw2:12.2.12-139.el7cp
Red Hat ceph storage 3rbd-mirror2:12.2.12-139.el7cp
Red Hat ceph storage 3tcmu-runner0:1.4.0-3.el7cp
Red Hat ceph storage 3tcmu-runner-debuginfo0:1.4.0-3.el7cp
Red Hat ceph storage 4ceph2:14.2.11-95.el7cp
Red Hat ceph storage 4ceph2:14.2.11-95.el8cp
Red Hat ceph storage 4ceph-ansible0:4.0.41-1.el7cp
Red Hat ceph storage 4ceph-ansible0:4.0.41-1.el8cp
Red Hat ceph storage 4ceph-base2:14.2.11-95.el7cp
Red Hat ceph storage 4ceph-base2:14.2.11-95.el8cp
Red Hat ceph storage 4ceph-base-debuginfo2:14.2.11-95.el8cp
Red Hat ceph storage 4ceph-common2:14.2.11-95.el8cp
Red Hat ceph storage 4ceph-common2:14.2.11-95.el7cp
Red Hat ceph storage 4ceph-common-debuginfo2:14.2.11-95.el8cp
Red Hat ceph storage 4ceph-debuginfo2:14.2.11-95.el7cp
Red Hat ceph storage 4ceph-debugsource2:14.2.11-95.el8cp
Red Hat ceph storage 4ceph-fuse2:14.2.11-95.el8cp
Red Hat ceph storage 4ceph-fuse2:14.2.11-95.el7cp
Red Hat ceph storage 4ceph-fuse-debuginfo2:14.2.11-95.el8cp
Red Hat ceph storage 4ceph-grafana-dashboards2:14.2.11-95.el7cp
Red Hat ceph storage 4ceph-grafana-dashboards2:14.2.11-95.el8cp
Red Hat ceph storage 4ceph-mds2:14.2.11-95.el8cp
Red Hat ceph storage 4ceph-mds2:14.2.11-95.el7cp
Red Hat ceph storage 4ceph-mds-debuginfo2:14.2.11-95.el8cp
Red Hat ceph storage 4ceph-mgr2:14.2.11-95.el7cp
Red Hat ceph storage 4ceph-mgr2:14.2.11-95.el8cp
Red Hat ceph storage 4ceph-mgr-dashboard2:14.2.11-95.el7cp
Red Hat ceph storage 4ceph-mgr-dashboard2:14.2.11-95.el8cp
Red Hat ceph storage 4ceph-mgr-debuginfo2:14.2.11-95.el8cp
Red Hat ceph storage 4ceph-mgr-diskprediction-local2:14.2.11-95.el8cp
Red Hat ceph storage 4ceph-mgr-diskprediction-local2:14.2.11-95.el7cp
Red Hat ceph storage 4ceph-mgr-k8sevents2:14.2.11-95.el8cp
Red Hat ceph storage 4ceph-mgr-k8sevents2:14.2.11-95.el7cp
Red Hat ceph storage 4ceph-mgr-rook2:14.2.11-95.el8cp
Red Hat ceph storage 4ceph-mgr-rook2:14.2.11-95.el7cp
Red Hat ceph storage 4ceph-mon2:14.2.11-95.el8cp
Red Hat ceph storage 4ceph-mon2:14.2.11-95.el7cp
Red Hat ceph storage 4ceph-mon-debuginfo2:14.2.11-95.el8cp
Red Hat ceph storage 4ceph-osd2:14.2.11-95.el8cp
Red Hat ceph storage 4ceph-osd2:14.2.11-95.el7cp
Red Hat ceph storage 4ceph-osd-debuginfo2:14.2.11-95.el8cp
Red Hat ceph storage 4ceph-radosgw2:14.2.11-95.el8cp
Red Hat ceph storage 4ceph-radosgw2:14.2.11-95.el7cp
Red Hat ceph storage 4ceph-radosgw-debuginfo2:14.2.11-95.el8cp
Red Hat ceph storage 4ceph-selinux2:14.2.11-95.el8cp
Red Hat ceph storage 4ceph-selinux2:14.2.11-95.el7cp
Red Hat ceph storage 4ceph-test2:14.2.11-95.el8cp
Red Hat ceph storage 4ceph-test2:14.2.11-95.el7cp
Red Hat ceph storage 4ceph-test-debuginfo2:14.2.11-95.el8cp
Red Hat ceph storage 4libcephfs-devel2:14.2.11-95.el7cp
Red Hat ceph storage 4libcephfs-devel2:14.2.11-95.el8cp
Red Hat ceph storage 4libcephfs22:14.2.11-95.el8cp
Red Hat ceph storage 4libcephfs22:14.2.11-95.el7cp
Red Hat ceph storage 4libcephfs2-debuginfo2:14.2.11-95.el8cp
Red Hat ceph storage 4librados-devel2:14.2.11-95.el8cp
Red Hat ceph storage 4librados-devel2:14.2.11-95.el7cp
Red Hat ceph storage 4librados-devel-debuginfo2:14.2.11-95.el8cp
Red Hat ceph storage 4librados22:14.2.11-95.el8cp
Red Hat ceph storage 4librados22:14.2.11-95.el7cp
Red Hat ceph storage 4librados2-debuginfo2:14.2.11-95.el8cp
Red Hat ceph storage 4libradospp-devel2:14.2.11-95.el8cp
Red Hat ceph storage 4libradospp-devel2:14.2.11-95.el7cp
Red Hat ceph storage 4libradosstriper12:14.2.11-95.el7cp
Red Hat ceph storage 4libradosstriper12:14.2.11-95.el8cp
Red Hat ceph storage 4libradosstriper1-debuginfo2:14.2.11-95.el8cp
Red Hat ceph storage 4librbd-devel2:14.2.11-95.el7cp
Red Hat ceph storage 4librbd-devel2:14.2.11-95.el8cp
Red Hat ceph storage 4librbd12:14.2.11-95.el7cp
Red Hat ceph storage 4librbd12:14.2.11-95.el8cp
Red Hat ceph storage 4librbd1-debuginfo2:14.2.11-95.el8cp
Red Hat ceph storage 4librgw-devel2:14.2.11-95.el7cp
Red Hat ceph storage 4librgw-devel2:14.2.11-95.el8cp
Red Hat ceph storage 4librgw22:14.2.11-95.el8cp
Red Hat ceph storage 4librgw22:14.2.11-95.el7cp
Red Hat ceph storage 4librgw2-debuginfo2:14.2.11-95.el8cp
Red Hat ceph storage 4python-ceph-argparse2:14.2.11-95.el7cp
Red Hat ceph storage 4python-cephfs2:14.2.11-95.el7cp
Red Hat ceph storage 4python-rados2:14.2.11-95.el7cp
Red Hat ceph storage 4python-rbd2:14.2.11-95.el7cp
Red Hat ceph storage 4python-rgw2:14.2.11-95.el7cp
Red Hat ceph storage 4python3-ceph-argparse2:14.2.11-95.el8cp
Red Hat ceph storage 4python3-cephfs2:14.2.11-95.el8cp
Red Hat ceph storage 4python3-cephfs-debuginfo2:14.2.11-95.el8cp
Red Hat ceph storage 4python3-rados2:14.2.11-95.el8cp
Red Hat ceph storage 4python3-rados-debuginfo2:14.2.11-95.el8cp
Red Hat ceph storage 4python3-rbd2:14.2.11-95.el8cp
Red Hat ceph storage 4python3-rbd-debuginfo2:14.2.11-95.el8cp
Red Hat ceph storage 4python3-rgw2:14.2.11-95.el8cp
Red Hat ceph storage 4python3-rgw-debuginfo2:14.2.11-95.el8cp
Red Hat ceph storage 4rbd-fuse-debuginfo2:14.2.11-95.el8cp
Red Hat ceph storage 4rbd-mirror2:14.2.11-95.el8cp
Red Hat ceph storage 4rbd-mirror2:14.2.11-95.el7cp
Red Hat ceph storage 4rbd-mirror-debuginfo2:14.2.11-95.el8cp
Red Hat ceph storage 4rbd-nbd2:14.2.11-95.el8cp
Red Hat ceph storage 4rbd-nbd2:14.2.11-95.el7cp
Red Hat ceph storage 4rbd-nbd-debuginfo2:14.2.11-95.el8cp
SUSE Enterprise Storage 6ceph14.2.16.402+g7d47dbaf4d-3.57.1
SUSE Enterprise Storage 7ceph15.2.8.80+g1f4b6229ca-3.13.1
SUSE Linux Enterprise Module for Basesystem 15 SP1ceph14.2.16.402+g7d47dbaf4d-3.57.1
SUSE Linux Enterprise Module for Basesystem 15 SP2ceph15.2.8.80+g1f4b6229ca-3.13.1
Ubuntu 18.04 LTSceph12.2.13-0ubuntu0.18.04.10
Ubuntu 20.04 LTSceph15.2.12-0ubuntu0.20.04.1
Ubuntu Pro 16.04 LTScephno fix
openSUSE Leap 15.1ceph14.2.16.402+g7d47dbaf4d-lp151.2.31.1
openSUSE Leap 15.1ceph-test14.2.16.402+g7d47dbaf4d-lp151.2.31.1
openSUSE Leap 15.2ceph15.2.8.80+g1f4b6229ca-lp152.2.9.1
openSUSE Leap 15.2ceph-test15.2.8.80+g1f4b6229ca-lp152.2.9.1
openSUSE Tumbleweedceph16.2.6.463+g22e7612f9ad-1.1