CVE-2018-1129
- State
- Published
- Severity
- Not scored
- Published
- Jul 10, 2018
- Updated
- Sep 17, 2024
- Reserved
- Dec 4, 2017
Description
A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.
Scores
The record has no CVSS score.
Weaknesses
Affected Products
| Product | Versions |
|---|---|
cephRed Hat, Inc. |
|
References
- RHSA-2018:2261vendor-advisory
- RHSA-2018:2177vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1576057
- RHSA-2018:2179vendor-advisory
- RHSA-2018:2274vendor-advisory
- http://tracker.ceph.com/issues/24837
- https://github.com/ceph/ceph/commit/8f396cf35a3826044b089141667a196454c0a587
- DSA-4339vendor-advisory
- [debian-lts-announce] 20190315 [SECURITY] [DLA 1715-1] linux-4.9 security updatemailing-list
- openSUSE-SU-2019:1284vendor-advisory
- http://packetstormsecurity.com/files/154245/Kernel-Live-Patch-Security-Notice-LSN-0054-1.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.