CVE-2018-16846

It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices.

This update for ceph version 13.2.4 fixes the following issues:

Security issues fixed:

• CVE-2018-14662: Fixed an issue with LUKS 'config-key' safety (bsc#1111177)
• CVE-2018-10861: Fixed an authorization bypass on OSD pool ops in ceph-mon (bsc#1099162)
• CVE-2018-1128: Fixed signature check bypass in cephx (bsc#1096748)
• CVE-2018-1129: Fixed replay attack in cephx protocol (bsc#1096748)
• CVE-2018-16846: Enforced bounds on max-keys/max-uploads/max-parts in rgw (bsc#1114710)

Non-security issues fixed:

• ceph-volume Python 3 fixes (bsc#1114567)
• Fixed python3 module loading (bsc#1086613)
• Fixed an issue where ceph build fails (bsc#1084645)
• ceph's SPDK builds with march=native (bsc#1101262)

This update was imported from the SUSE:SLE-15:Update update project.

This update for ceph fixes the following issues:

Security issues fixed:

• CVE-2018-14662: mon: limit caps allowed to access the config store (bsc#1111177)
• CVE-2018-16846: rgw: enforce bounds on max-keys/max-uploads/max-parts (bsc#1114710)
• CVE-2018-16889: rgw: sanitize customer encryption keys from log output in v4 auth (bsc#1121567)

Non-security issue fixed:

• os/bluestore: avoid frequent allocator dump on bluefs rebalance failure (bsc#1113246)

This update for ceph version 13.2.4 fixes the following issues:

Security issues fixed:

• CVE-2018-14662: Fixed an issue with LUKS 'config-key' safety (bsc#1111177)
• CVE-2018-10861: Fixed an authorization bypass on OSD pool ops in ceph-mon (bsc#1099162)
• CVE-2018-1128: Fixed signature check bypass in cephx (bsc#1096748)
• CVE-2018-1129: Fixed replay attack in cephx protocol (bsc#1096748)
• CVE-2018-16846: Enforced bounds on max-keys/max-uploads/max-parts in rgw

Non-security issues fixed:

• ceph-volume Python 3 fixes (bsc#1114567)
• fix python3 module loading (bsc#1086613)

It was discovered that Ceph incorrectly handled read only permissions. An authenticated attacker could use this issue to obtain dm-crypt encryption keys. This issue only affected Ubuntu 16.04 LTS. (CVE-2018-14662)

It was discovered that Ceph incorrectly handled certain OMAPs holding bucket indices. An authenticated attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2018-16846)

It was discovered that Ceph incorrectly sanitized certain debug logs. A local attacker could possibly use this issue to obtain encryption key information. This issue was only addressed in Ubuntu 18.10 and Ubuntu 19.04. (CVE-2018-16889)

It was discovered that Ceph incorrectly handled certain civetweb requests. A remote attacker could possibly use this issue to consume resources, leading to a denial of service. This issue only affected Ubuntu 18.10 and Ubuntu 19.04. (CVE-2019-3821)