UBUNTU-CVE-2018-16889

See a problem?

Source

https://ubuntu.com/security/notices/UBUNTU-CVE-2018-16889

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-16889.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2018-16889

Related

Published

2019-01-28T00:00:00Z

Modified

2019-01-28T00:00:00Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

Ceph does not properly sanitize encryption keys in debug logging for v4 auth. This results in the leaking of encryption key information in log files via plaintext. Versions up to v13.2.4 are vulnerable.

References

Affected packages

Ubuntu:16.04:LTS / ceph

Package

Name: ceph
Purl: pkg:deb/ubuntu/ceph@10.2.11-0ubuntu0.16.04.2?arch=src?distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

10.2.11-0ubuntu0.16.04.2

Affected versions

0.*

0.94.3-0ubuntu2

0.94.5-0ubuntu1

9.*

9.2.0-0ubuntu3

9.2.0-0ubuntu4

9.2.0-0ubuntu5

9.2.0-0ubuntu6

10.*

10.0.2-0ubuntu1

10.0.3-0ubuntu1

10.0.5-0ubuntu1

10.1.0-0ubuntu1

10.1.1-0ubuntu1

10.1.2-0ubuntu1

10.2.0-0ubuntu0.16.04.1

10.2.0-0ubuntu0.16.04.2

10.2.2-0ubuntu0.16.04.2

10.2.3-0ubuntu0.16.04.2

10.2.5-0ubuntu0.16.04.1

10.2.6-0ubuntu0.16.04.1

10.2.7-0ubuntu0.16.04.1

10.2.9-0ubuntu0.16.04.1

10.2.10-0ubuntu0.16.04.1

10.2.11-0ubuntu0.16.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "radosgw-dbg": "10.2.11-0ubuntu0.16.04.2",
            "libcephfs1-dbgsym": "10.2.11-0ubuntu0.16.04.2",
            "ceph-dbg": "10.2.11-0ubuntu0.16.04.2",
            "ceph-mds": "10.2.11-0ubuntu0.16.04.2",
            "rbd-fuse-dbgsym": "10.2.11-0ubuntu0.16.04.2",
            "rbd-mirror-dbgsym": "10.2.11-0ubuntu0.16.04.2",
            "ceph-dbgsym": "10.2.11-0ubuntu0.16.04.2",
            "libradosstriper1-dbgsym": "10.2.11-0ubuntu0.16.04.2",
            "rbd-nbd": "10.2.11-0ubuntu0.16.04.2",
            "ceph-mds-dbgsym": "10.2.11-0ubuntu0.16.04.2",
            "ceph-fuse-dbg": "10.2.11-0ubuntu0.16.04.2",
            "ceph-fuse-dbgsym": "10.2.11-0ubuntu0.16.04.2",
            "rbd-nbd-dbgsym": "10.2.11-0ubuntu0.16.04.2",
            "ceph-resource-agents": "10.2.11-0ubuntu0.16.04.2",
            "librbd1-dbg": "10.2.11-0ubuntu0.16.04.2",
            "librbd1-dbgsym": "10.2.11-0ubuntu0.16.04.2",
            "ceph-fs-common-dbg": "10.2.11-0ubuntu0.16.04.2",
            "python-ceph": "10.2.11-0ubuntu0.16.04.2",
            "ceph-test-dbg": "10.2.11-0ubuntu0.16.04.2",
            "ceph-common": "10.2.11-0ubuntu0.16.04.2",
            "libcephfs-jni-dbg": "10.2.11-0ubuntu0.16.04.2",
            "rbd-fuse": "10.2.11-0ubuntu0.16.04.2",
            "libcephfs-java": "10.2.11-0ubuntu0.16.04.2",
            "ceph-test": "10.2.11-0ubuntu0.16.04.2",
            "python-rados": "10.2.11-0ubuntu0.16.04.2",
            "libcephfs1": "10.2.11-0ubuntu0.16.04.2",
            "radosgw": "10.2.11-0ubuntu0.16.04.2",
            "ceph-common-dbgsym": "10.2.11-0ubuntu0.16.04.2",
            "libcephfs-jni": "10.2.11-0ubuntu0.16.04.2",
            "radosgw-dbgsym": "10.2.11-0ubuntu0.16.04.2",
            "rbd-mirror-dbg": "10.2.11-0ubuntu0.16.04.2",
            "librados-dev": "10.2.11-0ubuntu0.16.04.2",
            "libradosstriper-dev": "10.2.11-0ubuntu0.16.04.2",
            "ceph-fuse": "10.2.11-0ubuntu0.16.04.2",
            "librgw2": "10.2.11-0ubuntu0.16.04.2",
            "ceph-fs-common": "10.2.11-0ubuntu0.16.04.2",
            "librados2": "10.2.11-0ubuntu0.16.04.2",
            "ceph": "10.2.11-0ubuntu0.16.04.2",
            "librados2-dbgsym": "10.2.11-0ubuntu0.16.04.2",
            "librgw2-dbg": "10.2.11-0ubuntu0.16.04.2",
            "librbd-dev": "10.2.11-0ubuntu0.16.04.2",
            "python-cephfs": "10.2.11-0ubuntu0.16.04.2",
            "ceph-fs-common-dbgsym": "10.2.11-0ubuntu0.16.04.2",
            "ceph-mds-dbg": "10.2.11-0ubuntu0.16.04.2",
            "rbd-mirror": "10.2.11-0ubuntu0.16.04.2",
            "libcephfs1-dbg": "10.2.11-0ubuntu0.16.04.2",
            "libcephfs-dev": "10.2.11-0ubuntu0.16.04.2",
            "librbd1": "10.2.11-0ubuntu0.16.04.2",
            "rbd-nbd-dbg": "10.2.11-0ubuntu0.16.04.2",
            "python-rbd": "10.2.11-0ubuntu0.16.04.2",
            "libcephfs-jni-dbgsym": "10.2.11-0ubuntu0.16.04.2",
            "libradosstriper1-dbg": "10.2.11-0ubuntu0.16.04.2",
            "librgw2-dbgsym": "10.2.11-0ubuntu0.16.04.2",
            "ceph-test-dbgsym": "10.2.11-0ubuntu0.16.04.2",
            "librgw-dev": "10.2.11-0ubuntu0.16.04.2",
            "ceph-common-dbg": "10.2.11-0ubuntu0.16.04.2",
            "librados2-dbg": "10.2.11-0ubuntu0.16.04.2",
            "libradosstriper1": "10.2.11-0ubuntu0.16.04.2",
            "rbd-fuse-dbg": "10.2.11-0ubuntu0.16.04.2"
        }
    ]
}

Ubuntu:18.04:LTS / ceph

Package

Name: ceph
Purl: pkg:deb/ubuntu/ceph@12.2.11-0ubuntu0.18.04.1?arch=src?distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

12.2.11-0ubuntu0.18.04.1

Affected versions

12.*

12.2.0-0ubuntu1

12.2.1-0ubuntu1

12.2.2-0ubuntu1

12.2.2-0ubuntu2

12.2.4-0ubuntu1

12.2.4-0ubuntu1.1

12.2.7-0ubuntu0.18.04.1

12.2.8-0ubuntu0.18.04.1

12.2.8-0ubuntu0.18.04.2

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "python-rbd-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "python3-rgw-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "python-cephfs-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "ceph-mds": "12.2.11-0ubuntu0.18.04.1",
            "python3-ceph-argparse": "12.2.11-0ubuntu0.18.04.1",
            "rbd-fuse-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "rbd-mirror-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "libradosstriper1-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "rbd-nbd": "12.2.11-0ubuntu0.18.04.1",
            "python3-rgw": "12.2.11-0ubuntu0.18.04.1",
            "ceph-mds-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "rados-objclass-dev": "12.2.11-0ubuntu0.18.04.1",
            "ceph-fuse-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "rbd-nbd-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "ceph-resource-agents": "12.2.11-0ubuntu0.18.04.1",
            "ceph-mgr": "12.2.11-0ubuntu0.18.04.1",
            "librbd1-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "python3-cephfs-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "python-ceph": "12.2.11-0ubuntu0.18.04.1",
            "ceph-common": "12.2.11-0ubuntu0.18.04.1",
            "python3-rbd-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "libcephfs2": "12.2.11-0ubuntu0.18.04.1",
            "libcephfs-java": "12.2.11-0ubuntu0.18.04.1",
            "rbd-fuse": "12.2.11-0ubuntu0.18.04.1",
            "ceph-test": "12.2.11-0ubuntu0.18.04.1",
            "python-rados": "12.2.11-0ubuntu0.18.04.1",
            "ceph-common-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "radosgw": "12.2.11-0ubuntu0.18.04.1",
            "libcephfs-jni": "12.2.11-0ubuntu0.18.04.1",
            "radosgw-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "python3-cephfs": "12.2.11-0ubuntu0.18.04.1",
            "ceph-osd": "12.2.11-0ubuntu0.18.04.1",
            "python-rados-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "python-rgw": "12.2.11-0ubuntu0.18.04.1",
            "librados-dev": "12.2.11-0ubuntu0.18.04.1",
            "libradosstriper-dev": "12.2.11-0ubuntu0.18.04.1",
            "ceph-fuse": "12.2.11-0ubuntu0.18.04.1",
            "ceph-mgr-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "librgw2": "12.2.11-0ubuntu0.18.04.1",
            "librados2": "12.2.11-0ubuntu0.18.04.1",
            "ceph": "12.2.11-0ubuntu0.18.04.1",
            "librados-dev-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "librados2-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "ceph-mon": "12.2.11-0ubuntu0.18.04.1",
            "ceph-mon-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "libcephfs2-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "python-cephfs": "12.2.11-0ubuntu0.18.04.1",
            "librbd-dev": "12.2.11-0ubuntu0.18.04.1",
            "python-rgw-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "rbd-mirror": "12.2.11-0ubuntu0.18.04.1",
            "ceph-base-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "libcephfs-dev": "12.2.11-0ubuntu0.18.04.1",
            "ceph-osd-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "librbd1": "12.2.11-0ubuntu0.18.04.1",
            "python3-rados": "12.2.11-0ubuntu0.18.04.1",
            "python3-rbd": "12.2.11-0ubuntu0.18.04.1",
            "python-rbd": "12.2.11-0ubuntu0.18.04.1",
            "libcephfs-jni-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "python3-rados-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "ceph-test-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "librgw2-dbgsym": "12.2.11-0ubuntu0.18.04.1",
            "ceph-base": "12.2.11-0ubuntu0.18.04.1",
            "librgw-dev": "12.2.11-0ubuntu0.18.04.1",
            "libradosstriper1": "12.2.11-0ubuntu0.18.04.1"
        }
    ]
}