CVE-2018-16889
ceph: Ceph does not properly sanitize encryption keys in debug logging for v4 auth
CVE-2018-16889 is fixed in 31 products on 1 platform, first by ceph 12.2.11-0ubuntu0.18.04.1, released January 27, 2019. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0054
45th percentile
Ceph does not properly sanitize encryption keys in debug logging for v4 auth. This results in the leaking of encryption key information in log files via plaintext. Versions up to v13.2.4 are vulnerable.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| ceph · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | ceph 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| ceph-base · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | ceph-base 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| ceph-common · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | ceph-common 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| ceph-fuse · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | ceph-fuse 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| ceph-mds · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | ceph-mds 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| ceph-mgr · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | ceph-mgr 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| ceph-mon · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | ceph-mon 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| ceph-osd · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | ceph-osd 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| ceph-resource-agents · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | ceph-resource-agents 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| ceph-test · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | ceph-test 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| libcephfs-java · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | libcephfs-java 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| libcephfs-jni · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | libcephfs-jni 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| libcephfs2 · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | libcephfs2 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| librados2 · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | librados2 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| libradosstriper1 · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | libradosstriper1 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| librbd1 · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | librbd1 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| librgw2 · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | librgw2 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| python-ceph · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | python-ceph 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| python-cephfs · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | python-cephfs 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| python-rados · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | python-rados 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| python-rbd · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | python-rbd 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| python-rgw · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | python-rgw 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| python3-ceph-argparse · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | python3-ceph-argparse 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| python3-cephfs · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | python3-cephfs 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| python3-rados · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | python3-rados 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| python3-rbd · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | python3-rbd 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| python3-rgw · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | python3-rgw 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| radosgw · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | radosgw 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| rbd-fuse · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | rbd-fuse 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| rbd-mirror · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | rbd-mirror 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |
| rbd-nbd · Ubuntu 18.04.6 LTS (bionic) | 12.2.11-0ubuntu0.18.04.1 | rbd-nbd 12.2.11-0ubuntu0.18.04.1 | Jan 27, 2019 |