USN-7182-1: Ceph vulnerability

Reference Links

• https://ubuntu.com/security/CVE-2024-48916
• https://launchpad.net/ubuntu/+source/ceph/19.2.0-0ubuntu2.1
• https://launchpad.net/ubuntu/+source/ceph/19.2.0-0ubuntu0.24.04.2
• https://launchpad.net/ubuntu/+source/ceph/17.2.7-0ubuntu0.22.04.2
• https://ubuntu.com/security/notices/USN-7182-1 (Advisory)

Child vulnerabilities

(Contains the following vulnerabilities)

• CVE-2024-48916

Frequently Asked Questions

• What is the vulnerability in USN-7182-1?

  USN-7182-1 discusses a vulnerability in Ceph that allows attackers to potentially bypass authentication checks due to incorrect handling of unsupported JWT algorithms.

• Which versions of Ceph are affected by USN-7182-1?

  USN-7182-1 affects Ceph versions prior to 19.2.0-0ubuntu2.1, among others in earlier releases.

• How do I fix the vulnerability identified in USN-7182-1?

  To resolve the issue in USN-7182-1, upgrade to Ceph version 19.2.0-0ubuntu2.1 or later.

• What are the potential impacts of the USN-7182-1 vulnerability?

  The USN-7182-1 vulnerability could lead to unauthorized access or actions within the Ceph RadosGW gateway.

• Is there a workaround for the vulnerability in USN-7182-1?

  There is no documented workaround for the USN-7182-1 vulnerability, and upgrading the software is recommended.