CVE-2020-1759
A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2...
A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
6.4
A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.
- Record
CVE-2020-1759- CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Weakness
- CWE-323
- Updated
- 2026-11-02
EUVDEUVD-2020-12587
6.4
A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.
- Record
EUVD-2020-12587- CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hcpq-vw4g-3vmh No score
A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2...
A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.
- Record
GHSA-hcpq-vw4g-3vmh- Weakness
- CWE-323, CWE-330
- Updated
- 2026-11-02
NVD
6.4
A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.
- Record
CVE-2020-1759- CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:N - Weakness
- CWE-323, CWE-330
- Updated
- 2026-11-02
OSVALPINE-CVE-2020-1759
6.8
A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.
- Record
ALPINE-CVE-2020-1759- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-03
OSV
6.8
A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.
- Record
CVE-2020-1759- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
Show 7 moreShow less
OSVDEBIAN-CVE-2020-1759
6.8
A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.
- Record
DEBIAN-CVE-2020-1759- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHBA-2020:4144
6.4
Red Hat Bug Fix Advisory: Red Hat Ceph Storage 4.1 Bug Fix update
- Record
RHBA-2020:4144- CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-1759
6.8
A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.
- Record
UBUNTU-CVE-2020-1759- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVBIT-ceph-2020-1759 No score
A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks.
- Record
BIT-ceph-2020-1759- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:0494-1 No score
Security update for ceph
This update for ceph fixes the following issues:
- CVE-2020-1759: Fixed once reuse in msgr V2 secure mode (bsc#1166403)
- CVE-2020-1760: Fixed XSS due to RGW GetObject header-splitting (bsc#1166484).
This update was imported from the SUSE:SLE-15-SP1:Update update project.
- Record
openSUSE-SU-2020:0494-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10676-1 No score
ceph-16.2.6.45+g8fda9838398-1.1 on GA media
These are all security issues fixed in the ceph-16.2.6.45+g8fda9838398-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10676-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:0930-1 No score
Security update for ceph
This update for ceph fixes the following issues:
- CVE-2020-1759: Fixed once reuse in msgr V2 secure mode (bsc#1166403)
- CVE-2020-1760: Fixed XSS due to RGW GetObject header-splitting (bsc#1166484).
- Record
SUSE-SU-2020:0930-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cephAlpine:v3.10 |
before 14.2.9-r0 | 14.2.9-r0 |
cephAlpine:v3.11 |
before 14.2.9-r0 | 14.2.9-r0 |
cephAlpine:v3.12 |
before 14.2.9-r0 | 14.2.9-r0 |
cephAlpine:v3.13 |
before 14.2.9-r0 | 14.2.9-r0 |
cephAlpine:v3.14 |
before 14.2.9-r0 | 14.2.9-r0 |
cephAlpine:v3.15 |
before 14.2.9-r0 | 14.2.9-r0 |
cephAlpine:v3.16 |
before 14.2.9-r0 | 14.2.9-r0 |
ceph16Alpine:v3.17 |
before 14.2.9-r0 | 14.2.9-r0 |
ceph16Alpine:v3.18 |
before 14.2.9-r0 | 14.2.9-r0 |
cephBitnami |
before 14.2.21 | 14.2.21 |
Show 99 moreShow less
| Package | Affected | Fixed |
|---|---|---|
cephDebian:12 |
before 14.2.9-1 | 14.2.9-1 |
cephDebian:13 |
before 14.2.9-1 | 14.2.9-1 |
cephDebian:14 |
before 14.2.9-1 | 14.2.9-1 |
cephRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
ceph-baseRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
ceph-commonRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
ceph-debuginfoRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
ceph-grafana-dashboardsRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
ceph-mgrRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
ceph-mgr-dashboardRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
ceph-mgr-diskprediction-localRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
ceph-mgr-k8seventsRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
ceph-mgr-rookRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
ceph-monRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
ceph-selinuxRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
ceph-testRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
libcephfs-develRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
libcephfs2Red Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
librados-develRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
librados2Red Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
libradospp-develRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
libradosstriper1Red Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
librbd-develRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
librbd1Red Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
librgw-develRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
librgw2Red Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
python-ceph-argparseRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
python-cephfsRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
python-radosRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
python-rbdRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
python-rgwRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
ceph-osdRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
ceph-ansibleRed Hat:ceph_storage:4::el7 |
before 0:4.0.31-1.el7cp | 0:4.0.31-1.el7cp |
ceph-fuseRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
ceph-mdsRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
ceph-radosgwRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
rbd-mirrorRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
rbd-nbdRed Hat:ceph_storage:4::el7 |
before 2:14.2.8-111.el7cp | 2:14.2.8-111.el7cp |
cephRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
ceph-baseRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
ceph-base-debuginfoRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
ceph-commonRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
ceph-common-debuginfoRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
ceph-debugsourceRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
ceph-fuse-debuginfoRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
ceph-grafana-dashboardsRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
ceph-mds-debuginfoRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
ceph-mgrRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
ceph-mgr-dashboardRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
ceph-mgr-debuginfoRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
ceph-mgr-diskprediction-localRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
ceph-mgr-k8seventsRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
ceph-mgr-rookRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
ceph-monRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
ceph-mon-debuginfoRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
ceph-osd-debuginfoRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
ceph-radosgw-debuginfoRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
ceph-selinuxRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
ceph-testRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
ceph-test-debuginfoRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
libcephfs-develRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
libcephfs2Red Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
libcephfs2-debuginfoRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
librados-develRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
librados-devel-debuginfoRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
librados2Red Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
librados2-debuginfoRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
libradospp-develRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
libradosstriper1Red Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
libradosstriper1-debuginfoRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
librbd-develRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
librbd1Red Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
librbd1-debuginfoRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
librgw-develRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
librgw2Red Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
librgw2-debuginfoRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
python3-ceph-argparseRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
python3-cephfsRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
python3-cephfs-debuginfoRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
python3-radosRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
python3-rados-debuginfoRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
python3-rbdRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
python3-rbd-debuginfoRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
python3-rgwRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
python3-rgw-debuginfoRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
rbd-fuse-debuginfoRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
rbd-mirror-debuginfoRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
rbd-nbd-debuginfoRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
ceph-osdRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
ceph-ansibleRed Hat:ceph_storage:4::el8 |
before 0:4.0.31-1.el8cp | 0:4.0.31-1.el8cp |
ceph-fuseRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
ceph-mdsRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
ceph-radosgwRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
rbd-mirrorRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
rbd-nbdRed Hat:ceph_storage:4::el8 |
before 2:14.2.8-111.el8cp | 2:14.2.8-111.el8cp |
cephSUSE:Linux Enterprise Module for Basesystem 15 SP1 From an advisory covering 2 CVEs |
before 14.2.5.389+gb0f23ac248-3.35.2 | 14.2.5.389+gb0f23ac248-3.35.2 |
cephSUSE:Enterprise Storage 6 From an advisory covering 2 CVEs |
before 14.2.5.389+gb0f23ac248-3.35.2 | 14.2.5.389+gb0f23ac248-3.35.2 |
cephopenSUSE:Leap 15.1 From an advisory covering 2 CVEs |
before 14.2.5.389+gb0f23ac248-lp151.2.13.1 | 14.2.5.389+gb0f23ac248-lp151.2.13.1 |
ceph-testopenSUSE:Leap 15.1 From an advisory covering 2 CVEs |
before 14.2.5.389+gb0f23ac248-lp151.2.13.1 | 14.2.5.389+gb0f23ac248-lp151.2.13.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| affected | ||
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-1759 is a medium vulnerability (CVSS 6.4) in Ceph, published April 6, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.62%, the 76th percentile. Fixed in ceph 14.2.9-r0.
References
bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1759
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3A2UFR5IUIEXJUCF64GQ5OVLCZGODXE
security.gentoo.org/glsa/202105-39
nvd.nist.gov/vuln/detail/CVE-2020-1759
lists.fedoraproject.org/archives/list/[email protected]/message/P3A2UFR5IUIEXJUCF64GQ5OVLCZGODXE
github.com/advisories/GHSA-hcpq-vw4g-3vmh
Show 98 moreShow less
security.alpinelinux.org/vuln/CVE-2020-1759
security-tracker.debian.org/tracker/CVE-2020-1759
access.redhat.com/errata/RHBA-2020:4144
bugzilla.redhat.com/show_bug.cgi?id=1682967
bugzilla.redhat.com/show_bug.cgi?id=1707488
bugzilla.redhat.com/show_bug.cgi?id=1749090
bugzilla.redhat.com/show_bug.cgi?id=1772310
bugzilla.redhat.com/show_bug.cgi?id=1794526
bugzilla.redhat.com/show_bug.cgi?id=1794586
bugzilla.redhat.com/show_bug.cgi?id=1806791
bugzilla.redhat.com/show_bug.cgi?id=1814057
bugzilla.redhat.com/show_bug.cgi?id=1825113
bugzilla.redhat.com/show_bug.cgi?id=1827349
bugzilla.redhat.com/show_bug.cgi?id=1827703
bugzilla.redhat.com/show_bug.cgi?id=1827856
bugzilla.redhat.com/show_bug.cgi?id=1831865
bugzilla.redhat.com/show_bug.cgi?id=1845086
bugzilla.redhat.com/show_bug.cgi?id=1845622
bugzilla.redhat.com/show_bug.cgi?id=1845658
bugzilla.redhat.com/show_bug.cgi?id=1846035
bugzilla.redhat.com/show_bug.cgi?id=1846504
bugzilla.redhat.com/show_bug.cgi?id=1848016
bugzilla.redhat.com/show_bug.cgi?id=1848388
bugzilla.redhat.com/show_bug.cgi?id=1848494
bugzilla.redhat.com/show_bug.cgi?id=1848503
bugzilla.redhat.com/show_bug.cgi?id=1848594
bugzilla.redhat.com/show_bug.cgi?id=1848852
bugzilla.redhat.com/show_bug.cgi?id=1849894
bugzilla.redhat.com/show_bug.cgi?id=1850268
bugzilla.redhat.com/show_bug.cgi?id=1850718
bugzilla.redhat.com/show_bug.cgi?id=1850721
bugzilla.redhat.com/show_bug.cgi?id=1850722
bugzilla.redhat.com/show_bug.cgi?id=1850724
bugzilla.redhat.com/show_bug.cgi?id=1850730
bugzilla.redhat.com/show_bug.cgi?id=1850738
bugzilla.redhat.com/show_bug.cgi?id=1850742
bugzilla.redhat.com/show_bug.cgi?id=1850743
bugzilla.redhat.com/show_bug.cgi?id=1850746
bugzilla.redhat.com/show_bug.cgi?id=1850747
bugzilla.redhat.com/show_bug.cgi?id=1850748
bugzilla.redhat.com/show_bug.cgi?id=1850750
bugzilla.redhat.com/show_bug.cgi?id=1850751
bugzilla.redhat.com/show_bug.cgi?id=1850901
bugzilla.redhat.com/show_bug.cgi?id=1850955
bugzilla.redhat.com/show_bug.cgi?id=1851455
bugzilla.redhat.com/show_bug.cgi?id=1851764
bugzilla.redhat.com/show_bug.cgi?id=1851906
bugzilla.redhat.com/show_bug.cgi?id=1851943
bugzilla.redhat.com/show_bug.cgi?id=1852796
bugzilla.redhat.com/show_bug.cgi?id=1853052
bugzilla.redhat.com/show_bug.cgi?id=1853794
bugzilla.redhat.com/show_bug.cgi?id=1854973
bugzilla.redhat.com/show_bug.cgi?id=1855382
bugzilla.redhat.com/show_bug.cgi?id=1856754
bugzilla.redhat.com/show_bug.cgi?id=1856908
bugzilla.redhat.com/show_bug.cgi?id=1856918
bugzilla.redhat.com/show_bug.cgi?id=1857143
bugzilla.redhat.com/show_bug.cgi?id=1857827
bugzilla.redhat.com/show_bug.cgi?id=1858891
bugzilla.redhat.com/show_bug.cgi?id=1859585
bugzilla.redhat.com/show_bug.cgi?id=1859985
bugzilla.redhat.com/show_bug.cgi?id=1860815
bugzilla.redhat.com/show_bug.cgi?id=1862416
bugzilla.redhat.com/show_bug.cgi?id=1863027
bugzilla.redhat.com/show_bug.cgi?id=1866006
bugzilla.redhat.com/show_bug.cgi?id=1866940
bugzilla.redhat.com/show_bug.cgi?id=1869837
bugzilla.redhat.com/show_bug.cgi?id=1872983
bugzilla.redhat.com/show_bug.cgi?id=1873010
bugzilla.redhat.com/show_bug.cgi?id=1874645
bugzilla.redhat.com/show_bug.cgi?id=1875305
bugzilla.redhat.com/show_bug.cgi?id=1876447
bugzilla.redhat.com/show_bug.cgi?id=1876803
bugzilla.redhat.com/show_bug.cgi?id=1877426
bugzilla.redhat.com/show_bug.cgi?id=1877672
security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_4144.json
access.redhat.com/security/cve/CVE-2020-1759
bugzilla.redhat.com/show_bug.cgi?id=1811712
cve.org/CVERecord?id=CVE-2020-1759
openwall.com/lists/oss-security/2020/04/07/2
suse.com/support/update/announcement/2020/suse-su-20200930-1
bugzilla.suse.com/1166403
bugzilla.suse.com/1166484
suse.com/security/cve/CVE-2020-1759
suse.com/security/cve/CVE-2020-1760
ubuntu.com/security/CVE-2020-1759
lists.opensuse.org/archives/list/[email protected]/thread/OJSWL6WBI6VWKUYIMTPZODQDWMNXKFCV
suse.com/security/cve/CVE-2017-16818
suse.com/security/cve/CVE-2018-10861
suse.com/security/cve/CVE-2018-1128
suse.com/security/cve/CVE-2018-16889
suse.com/security/cve/CVE-2019-10222
suse.com/security/cve/CVE-2019-3821
suse.com/security/cve/CVE-2020-10736
suse.com/security/cve/CVE-2021-20288
suse.com/security/cve/CVE-2021-3509
suse.com/security/cve/CVE-2021-3524
suse.com/security/cve/CVE-2021-3531