CVE-2018-10861: High severity ceph vulnerability
A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, and corrupt snapshot images.
This would require user to have read access and for that user must have key for authentication. It would only affect snapshots and images. So attacker with read access will only be able to corrupt data of snapshot images and rest of the ceph cluster should work as it is. Affect on integrity would be low and availability part can be controlled by mitigation using 'monallowpooldelete = false' in ceph.conf to disable deletion of pools
Other sources
A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2018-10861.
What is the severity of CVE-2018-10861?
The severity of CVE-2018-10861 is high with a CVSS score of 8.1.
What software versions are affected by CVE-2018-10861?
Ceph versions 10.2.11, 12.2.6, and 13.2.1 are affected by CVE-2018-10861.
How can an authenticated ceph user exploit CVE-2018-10861?
An authenticated ceph user with read access can delete, create ceph storage pools, and corrupt snapshot images.
Where can I find more information about CVE-2018-10861?
You can find more information about CVE-2018-10861 in the following references: [Reference 1](http://tracker.ceph.com/issues/24838), [Reference 2](https://github.com/ceph/ceph/commit/975528f632f73fbffa3f1fee304e3bbe3296cffc), [Reference 3](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1599407).