SB2023051001 - Ubuntu update for ceph
Published: May 10, 2023
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 4 secuirty vulnerabilities.
1) Use of a broken or risky cryptographic algorithm (CVE-ID: CVE-2021-3979)
The vulnerability allows an attacker to gain access to sensitive information.
The vulnerability exists due to Ceph volume does not the honour osd_dmcrypt_key_size, resulting in the key length is being incorrectly passed in an encryption algorithm to create a non random key. An attacker with physical access to encrypted device can decrypt data and gain access to sensitive information.
2) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2022-0670)
The vulnerability allows a remote user to escalate privileges on the system.
The vulnerability exists due to an error within the "volumes" plugin in Ceph Manager. The Openstack manilla owning a Ceph File system "share" enables the owner to read/write any manilla share or entire file system.
3) Incorrect default permissions (CVE-ID: CVE-2022-3650)
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to ceph-crash.service runs the ceph-crash Python script with root privileges. The script is operating in the directory /var/lib/ceph/crash which is controlled by the unprivileged ceph user. A local user can inject arbitrary data into the crash dump and force the privileged script to write that file into an arbitrary location on the system, resulting in privilege escalation.
4) Input validation error (CVE-ID: CVE-2022-3854)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input when handling URL on RGW backends. A remote attacker can pass specially crafted URL to the application and perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.