A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.

Metrics

No CVSS v4.0

No CVSS v3.1

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

Access Vector Adjacent Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

The EPSS score is 0.00404.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Ceph
  • Ceph
Debian
  • Debian Linux
Opensuse
  • Leap
Redhat
  • Ceph Storage
  • Ceph Storage Mon
  • Ceph Storage Osd
  • Enterprise Linux
  • Enterprise Linux Desktop
  • Enterprise Linux Server
  • Enterprise Linux Workstation

Configuration 1 [-]

OR cpe:2.3:a:redhat:ceph_storage:1.3:*:*:*:*:*:*:*
cpe:2.3:a:redhat:ceph_storage:3:*:*:*:*:*:*:*
cpe:2.3:a:redhat:ceph_storage_mon:2:*:*:*:*:*:*:*
cpe:2.3:a:redhat:ceph_storage_mon:3:*:*:*:*:*:*:*
cpe:2.3:a:redhat:ceph_storage_osd:2:*:*:*:*:*:*:*
cpe:2.3:a:redhat:ceph_storage_osd:3:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

Configuration 2 [-]

OR cpe:2.3:a:ceph:ceph:10.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ceph:ceph:10.2.1:*:*:*:*:*:*:*
cpe:2.3:a:ceph:ceph:10.2.2:*:*:*:*:*:*:*
cpe:2.3:a:ceph:ceph:10.2.3:*:*:*:*:*:*:*
cpe:2.3:a:ceph:ceph:10.2.4:*:*:*:*:*:*:*
cpe:2.3:a:ceph:ceph:10.2.5:*:*:*:*:*:*:*
cpe:2.3:a:ceph:ceph:10.2.6:*:*:*:*:*:*:*
cpe:2.3:a:ceph:ceph:10.2.7:*:*:*:*:*:*:*
cpe:2.3:a:ceph:ceph:10.2.8:*:*:*:*:*:*:*
cpe:2.3:a:ceph:ceph:10.2.9:*:*:*:*:*:*:*
cpe:2.3:a:ceph:ceph:10.2.10:*:*:*:*:*:*:*
cpe:2.3:a:ceph:ceph:10.2.11:*:*:*:*:*:*:*
cpe:2.3:a:ceph:ceph:12.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ceph:ceph:12.2.1:*:*:*:*:*:*:*
cpe:2.3:a:ceph:ceph:12.2.2:*:*:*:*:*:*:*
cpe:2.3:a:ceph:ceph:12.2.3:*:*:*:*:*:*:*
cpe:2.3:a:ceph:ceph:12.2.4:*:*:*:*:*:*:*
cpe:2.3:a:ceph:ceph:12.2.5:*:*:*:*:*:*:*
cpe:2.3:a:ceph:ceph:12.2.6:*:*:*:*:*:*:*
cpe:2.3:a:ceph:ceph:12.2.7:*:*:*:*:*:*:*
cpe:2.3:a:ceph:ceph:13.2.0:*:*:*:*:*:*:*
cpe:2.3:a:ceph:ceph:13.2.1:*:*:*:*:*:*:*

Configuration 3 [-]

OR cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Configuration 4 [-]

cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Ceph Storage 2.5
ceph-2:10.2.10-28.el7cp cpe:/a:redhat:ceph_storage:2::el7 RHSA-2018:2261 2018-07-26T00:00:00Z
ceph-ansible-0:3.0.39-1.el7cp cpe:/a:redhat:ceph_storage:2::el7 RHSA-2018:2261 2018-07-26T00:00:00Z
Red Hat Ceph Storage 2 for Ubuntu
cpe:/a:redhat:ceph_storage:2::ubuntu16.04 RHSA-2018:2274 2018-07-26T00:00:00Z
Red Hat Ceph Storage 3.0
ceph-2:12.2.4-30.el7cp cpe:/a:redhat:ceph_storage:3::el7 RHSA-2018:2177 2018-07-11T00:00:00Z
ceph-ansible-0:3.0.39-1.el7cp cpe:/a:redhat:ceph_storage:3::el7 RHSA-2018:2177 2018-07-11T00:00:00Z
cephmetrics-0:1.0.1-1.el7cp cpe:/a:redhat:ceph_storage:3::el7 RHSA-2018:2177 2018-07-11T00:00:00Z
nfs-ganesha-0:2.5.5-6.el7cp cpe:/a:redhat:ceph_storage:3::el7 RHSA-2018:2177 2018-07-11T00:00:00Z
Red Hat Ceph Storage 3 for Ubuntu
cpe:/a:redhat:ceph_storage:3::ubuntu16.04 RHSA-2018:2179 2018-07-11T00:00:00Z

No data.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-1715-1 linux-4.9 security update
Debian DSA Debian DSA DSA-4339-1 ceph security update
EUVD EUVD EUVD-2018-11773 A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00100.html cve-icon cve-icon
http://packetstormsecurity.com/files/154245/Kernel-Live-Patch-Security-Notice-LSN-0054-1.html cve-icon cve-icon
http://tracker.ceph.com/issues/24837 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2018:2177 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2018:2179 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2018:2261 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2018:2274 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=1576057 cve-icon cve-icon
https://github.com/ceph/ceph/commit/8f396cf35a3826044b089141667a196454c0a587 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2018-1129 cve-icon
https://www.cve.org/CVERecord?id=CVE-2018-1129 cve-icon
https://www.debian.org/security/2018/dsa-4339 cve-icon cve-icon
History

Sun, 13 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00132}

 epss

{'score': 0.00144}
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-09-17T01:45:51.875Z

Reserved: 2017-12-04T00:00:00

Link: CVE-2018-1129

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-07-10T14:29:00.417

Modified: 2024-11-21T03:59:15.087

Link: CVE-2018-1129

cve-icon Redhat

Severity : Moderate

Publid Date: 2018-07-09T12:00:00Z

Links: CVE-2018-1129 - Bugzilla

cve-icon OpenCVE Enrichment

No data.