Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-1129
3.3
LOWCVSS v2
Published
July 10, 2018
Affected
4 projects
Assigned by
Red Hat
Severity scale
010
Description
A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.
ceph/ceph
GitHubCeph is a distributed object, block, and file storage platform
GitHubCeph is a distributed object, block, and file storage platform = 12.2.1, = 13.2.1, = 13.2.0, = 12.2.7, = 12.2.6, = 12.2.5, = 12.2.4, = 12.2.3, = 12.2.2, = 10.2.2, = 10.2.4, = 10.2.11, = 10.2.6, = 10.2.7, = 10.2.8, = 10.2.9, = 10.2.0, = 10.2.1, = 10.2.3, = 10.2.5, = 10.2.10, = 12.2.0NVD
ceph
Crates.ioOfficial Ceph-rust. A rust-lang specific interface to Ceph librados and Admin Sockets. You can create a Ceph development environment with the
Chef automation tools: https://github.com/bloomberg/chef-bcs or with ceph-ansible. Chef-bcs uses the ceph-chef cookbook
created and manage at github.com/ceph/ceph-chef. It will build out a full Ceph environment which you can then use
for development etc. See README.md for details.
Crates.ioOfficial Ceph-rust. A rust-lang specific interface to Ceph librados and Admin Sockets. You can create a Ceph development environment with the
Chef automation tools: https://github.com/bloomberg/chef-bcs or with ceph-ansible. Chef-bcs uses the ceph-chef cookbook
created and manage at github.com/ceph/ceph-chef. It will build out a full Ceph environment which you can then use
for development etc. See README.md for details.
= 12.2.1, = 13.2.1, = 13.2.0, = 12.2.7, = 12.2.6, = 12.2.5, = 12.2.4, = 12.2.3, = 12.2.2, = 10.2.2, = 10.2.4, = 10.2.11, = 10.2.6, = 10.2.7, = 10.2.8, = 10.2.9, = 10.2.0, = 10.2.1, = 10.2.3, = 10.2.5, = 10.2.10, = 12.2.0NVD
NPM
Docker Hub