CVE-2018-1129

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-1129
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-1129.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2018-1129
Downstream
Related
Published
2018-07-10T14:29:00.417Z
Modified
2026-05-17T11:54:32.241514881Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.

Database specific 
{
    "unresolved_ranges": [
        {
            "vendor_product": "debian:debian_linux",
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "8.0"
                }
            ],
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"
            ]
        },
        {
            "cpes": [
                "cpe:2.3:a:redhat:ceph_storage:1.3:*:*:*:*:*:*:*",
                "cpe:2.3:a:redhat:ceph_storage:3:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "1.3"
                },
                {
                    "last_affected": "3"
                }
            ],
            "vendor_product": "redhat:ceph_storage"
        },
        {
            "cpes": [
                "cpe:2.3:a:redhat:ceph_storage_mon:3:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "3"
                }
            ],
            "vendor_product": "redhat:ceph_storage_mon"
        },
        {
            "cpes": [
                "cpe:2.3:a:redhat:ceph_storage_osd:3:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "3"
                }
            ],
            "vendor_product": "redhat:ceph_storage_osd"
        },
        {
            "cpes": [
                "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "7.0"
                }
            ],
            "vendor_product": "redhat:enterprise_linux"
        },
        {
            "cpes": [
                "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "7.0"
                }
            ],
            "vendor_product": "redhat:enterprise_linux_desktop"
        },
        {
            "cpes": [
                "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "7.0"
                }
            ],
            "vendor_product": "redhat:enterprise_linux_server"
        },
        {
            "cpes": [
                "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"
            ],
            "source": "CPE_FIELD",
            "extracted_events": [
                {
                    "last_affected": "7.0"
                }
            ],
            "vendor_product": "redhat:enterprise_linux_workstation"
        }
    ]
}
References

Affected packages