SB2018111511 - Debian update for ceph

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2018111511

SB2018111511 - Debian update for ceph

Published: November 15, 2018

Security Bulletin ID SB2018111511
Severity
Low
Patch available
YES
Number of vulnerabilities 4
Exploitation vector Adjecent network
Highest impact Data manipulation

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 4 secuirty vulnerabilities.


1) Improper input validation (CVE-ID: CVE-2017-7519)

The vulnerability allows a local attacker to cause DoS condition.

The vulnerability exists due to a format string error when the libradosstriper library parses user-supplied inpuе. A local attacker can submit malicious input and cause an application or service using the affected library to crash. 


2) Security restrictions bypass (CVE-ID: CVE-2018-10861)

The vulnerability allows an adjacent authenticated attacker to bypass security restrictions on the target system.

The vulnerability exists in ceph branches master, mimic, luminous and jewel due to improper handling of user-supplied requests by ceph mon. An adjacent attacker with read access to ceph can delete, create ceph storage pools and corrupt snapshot images.


3) Security restrictions bypass (CVE-ID: CVE-2018-1128)

The vulnerability allows an adjacent attacker to conduct replay attack on the target system.

The vulnerability exists in ceph branches master, mimic, luminous and jewel due to cephx authentication protocol did not verify ceph clients correctly. An adjacent attacker with access to ceph cluster network who is able to sniff packets on network can authenticate with ceph service, perform actions allowed by ceph service, conduct replay attack and bypass security restrictions.


4) Security restrictions bypass (CVE-ID: CVE-2018-1129)

The vulnerability allows an adjacent attacker to bypass security restrictions on the target system.

The vulnerability exists in ceph branches master, mimic, luminous and jewel due to improper handling of signature calculation by cephx authentication protocol. An adjacent attacker with access to ceph cluster network who is able to alter the message payload can bypass signature checks done by cephx protocol to conduct further attacks.


Remediation

Install update from vendor's website.

References