CVE-2018-1129 Auth bypass in ceph
An attacker on the cluster network can bypass Cephx signature checks by altering message payloads, compromising authentication integrity.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-1129?
CVE-2018-1129 is a medium-severity authentication bypass vulnerability in Debian Debian Linux, published on 10 Jul 2018. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.
Which versions are affected by CVE-2018-1129?
It affects 10 products.
Products include Ceph Ceph, Debian Debian Linux, Opensuse Leap, Redhat Ceph Storage, Redhat Ceph Storage Mon, Redhat Ceph Storage Osd and 4 more.
How do I fix CVE-2018-1129?
Apply the vendor's patch.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2018-1129 being exploited?
There is no known exploitation of CVE-2018-1129 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as AZL-38221, DEBIAN-CVE-2018-1129, GHSA-7qc9-w55v-w7p3.