Every CVE Search/ Get API key

CVE-2020-1759

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2...

6.4 MediumFix available

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.

Attack profile

How easy it is to exploit

Attack vector
Adjacent network
Complexity
High
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
None

Exploit likelihood

1.62%Up 1.0 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 6.4

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.

Record
CVE-2020-1759
CVSS 3.1
6.4 MediumCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Weakness
CWE-323
Updated
2026-11-02
EUVDEUVD-2020-12587 6.4

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.

Record
EUVD-2020-12587
CVSS 3.1
6.4 MediumCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-hcpq-vw4g-3vmh No score

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2...

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.

Record
GHSA-hcpq-vw4g-3vmh
Weakness
CWE-323, CWE-330
Updated
2026-11-02
NVD 6.4

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.

Record
CVE-2020-1759
CVSS 3.1
6.4 MediumCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS 3.1
6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS 2.0
5.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:N
Weakness
CWE-323, CWE-330
Updated
2026-11-02
OSVALPINE-CVE-2020-1759 6.8

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.

Record
ALPINE-CVE-2020-1759
CVSS 3.1
6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-03
OSV 6.8

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.

Record
CVE-2020-1759
CVSS 3.1
6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
Show 7 moreShow less
OSVDEBIAN-CVE-2020-1759 6.8

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.

Record
DEBIAN-CVE-2020-1759
CVSS 3.1
6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHBA-2020:4144 6.4

Red Hat Bug Fix Advisory: Red Hat Ceph Storage 4.1 Bug Fix update

Record
RHBA-2020:4144
CVSS 3.1
6.4 MediumCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2020-1759 6.8

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.

Record
UBUNTU-CVE-2020-1759
CVSS 3.1
6.8 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS 3.1
6.4 MediumCVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVBIT-ceph-2020-1759 No score

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.

Record
BIT-ceph-2020-1759
Updated
2026-11-02
OSVopenSUSE-SU-2020:0494-1 No score

Security update for ceph

This update for ceph fixes the following issues:

  • CVE-2020-1759: Fixed once reuse in msgr V2 secure mode (bsc#1166403)
  • CVE-2020-1760: Fixed XSS due to RGW GetObject header-splitting (bsc#1166484).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Record
openSUSE-SU-2020:0494-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10676-1 No score

ceph-16.2.6.45+g8fda9838398-1.1 on GA media

These are all security issues fixed in the ceph-16.2.6.45+g8fda9838398-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10676-1
Updated
2026-11-02
OSVSUSE-SU-2020:0930-1 No score

Security update for ceph

This update for ceph fixes the following issues:

  • CVE-2020-1759: Fixed once reuse in msgr V2 secure mode (bsc#1166403)
  • CVE-2020-1760: Fixed XSS due to RGW GetObject header-splitting (bsc#1166484).
Record
SUSE-SU-2020:0930-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ceph
Alpine:v3.10
before 14.2.9-r0
14.2.9-r0
ceph
Alpine:v3.11
before 14.2.9-r0
14.2.9-r0
ceph
Alpine:v3.12
before 14.2.9-r0
14.2.9-r0
ceph
Alpine:v3.13
before 14.2.9-r0
14.2.9-r0
ceph
Alpine:v3.14
before 14.2.9-r0
14.2.9-r0
ceph
Alpine:v3.15
before 14.2.9-r0
14.2.9-r0
ceph
Alpine:v3.16
before 14.2.9-r0
14.2.9-r0
ceph16
Alpine:v3.17
before 14.2.9-r0
14.2.9-r0
ceph16
Alpine:v3.18
before 14.2.9-r0
14.2.9-r0
ceph
Bitnami
before 14.2.21
14.2.21
Show 99 moreShow less
Affected packages
PackageAffectedFixed
ceph
Debian:12
before 14.2.9-1
14.2.9-1
ceph
Debian:13
before 14.2.9-1
14.2.9-1
ceph
Debian:14
before 14.2.9-1
14.2.9-1
ceph
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
ceph-base
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
ceph-common
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
ceph-debuginfo
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
ceph-grafana-dashboards
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
ceph-mgr
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
ceph-mgr-dashboard
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
ceph-mgr-diskprediction-local
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
ceph-mgr-k8sevents
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
ceph-mgr-rook
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
ceph-mon
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
ceph-selinux
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
ceph-test
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
libcephfs-devel
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
libcephfs2
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
librados-devel
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
librados2
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
libradospp-devel
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
libradosstriper1
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
librbd-devel
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
librbd1
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
librgw-devel
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
librgw2
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
python-ceph-argparse
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
python-cephfs
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
python-rados
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
python-rbd
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
python-rgw
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
ceph-osd
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
ceph-ansible
Red Hat:ceph_storage:4::el7
before 0:4.0.31-1.el7cp
0:4.0.31-1.el7cp
ceph-fuse
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
ceph-mds
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
ceph-radosgw
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
rbd-mirror
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
rbd-nbd
Red Hat:ceph_storage:4::el7
before 2:14.2.8-111.el7cp
2:14.2.8-111.el7cp
ceph
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph-base
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph-base-debuginfo
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph-common
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph-common-debuginfo
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph-debugsource
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph-fuse-debuginfo
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph-grafana-dashboards
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph-mds-debuginfo
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph-mgr
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph-mgr-dashboard
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph-mgr-debuginfo
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph-mgr-diskprediction-local
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph-mgr-k8sevents
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph-mgr-rook
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph-mon
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph-mon-debuginfo
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph-osd-debuginfo
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph-radosgw-debuginfo
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph-selinux
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph-test
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph-test-debuginfo
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
libcephfs-devel
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
libcephfs2
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
libcephfs2-debuginfo
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
librados-devel
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
librados-devel-debuginfo
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
librados2
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
librados2-debuginfo
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
libradospp-devel
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
libradosstriper1
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
libradosstriper1-debuginfo
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
librbd-devel
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
librbd1
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
librbd1-debuginfo
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
librgw-devel
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
librgw2
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
librgw2-debuginfo
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
python3-ceph-argparse
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
python3-cephfs
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
python3-cephfs-debuginfo
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
python3-rados
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
python3-rados-debuginfo
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
python3-rbd
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
python3-rbd-debuginfo
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
python3-rgw
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
python3-rgw-debuginfo
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
rbd-fuse-debuginfo
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
rbd-mirror-debuginfo
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
rbd-nbd-debuginfo
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph-osd
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph-ansible
Red Hat:ceph_storage:4::el8
before 0:4.0.31-1.el8cp
0:4.0.31-1.el8cp
ceph-fuse
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph-mds
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph-radosgw
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
rbd-mirror
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
rbd-nbd
Red Hat:ceph_storage:4::el8
before 2:14.2.8-111.el8cp
2:14.2.8-111.el8cp
ceph
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 2 CVEs
before 14.2.5.389+gb0f23ac248-3.35.2
14.2.5.389+gb0f23ac248-3.35.2
ceph
SUSE:Enterprise Storage 6
From an advisory covering 2 CVEs
before 14.2.5.389+gb0f23ac248-3.35.2
14.2.5.389+gb0f23ac248-3.35.2
ceph
openSUSE:Leap 15.1
From an advisory covering 2 CVEs
before 14.2.5.389+gb0f23ac248-lp151.2.13.1
14.2.5.389+gb0f23ac248-lp151.2.13.1
ceph-test
openSUSE:Leap 15.1
From an advisory covering 2 CVEs
before 14.2.5.389+gb0f23ac248-lp151.2.13.1
14.2.5.389+gb0f23ac248-lp151.2.13.1

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
affected
aliases, productsEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-1759 is a medium vulnerability (CVSS 6.4) in Ceph, published April 6, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.62%, the 76th percentile. Fixed in ceph 14.2.9-r0.

References

Show 98 moreShow less
MoveEnter Open