CVE-2018-1129: Medium severity redhat Ceph Storage vulnerability
A flaw was found in the way signature calculation is handled by cephx protocol. The signature calculation is encrypting a 29 byte struct with 16-byte block AES cipher, and then using the first 8 bytes of the result as signature. This only covers first (16 by tes) cipher block, datacrc falls on second block.There are no known exploits against this, If attacker can alter the message payload any changes in datacrc will not be noticed or checked by signature check.
Other sources
A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol. Ceph branches master mimic luminous and jewel are believed to be vulnerable.
— Microsoft
A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.
A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network, who is able to alter the message payload, was able to bypass signature checks done by cephx protocol.
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2018-1129.
What is the severity of CVE-2018-1129?
The severity of CVE-2018-1129 is medium.
How does the vulnerability in CVE-2018-1129 impact cephx authentication protocol?
The vulnerability in CVE-2018-1129 allows an attacker with access to the ceph cluster network to bypass signature checks done by the cephx authentication protocol.
Which software versions are affected by CVE-2018-1129?
Software versions 10.2.11, 12.2.6, 13.2.1, and earlier are affected by CVE-2018-1129.
Are there any remediation steps available for CVE-2018-1129?
Yes, updating ceph to versions 10.2.11, 12.2.6, 13.2.1, or later will remediate the vulnerability.