Every CVE Search/ Get API key

CVE-2018-10861

A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having...

8.1 HighFix available

A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
High

Exploit likelihood

3.18%Up 0.9 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 8.1

A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.

Record
CVE-2018-10861
CVSS 3.0
8.1 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS 2.0
5.5 MediumAV:N/AC:L/Au:S/C:N/I:P/A:P
Weakness
CWE-285, CWE-287
Updated
2026-11-02
CVE List No score

A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.

Record
CVE-2018-10861
Weakness
CWE-285
Updated
2026-11-02
EUVDEUVD-2018-2928 No score

A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.

Record
EUVD-2018-2928
Updated
2026-11-03
GitHub AdvisoriesGHSA-58jc-hvg4-pxxm 8.1

A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having...

A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.

Record
GHSA-58jc-hvg4-pxxm
CVSS 3.0
8.1 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Weakness
CWE-287
Updated
2026-11-02
OSV 8.1

A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.

Record
CVE-2018-10861
CVSS 3.0
8.1 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2018-10861 8.1

A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.

Record
DEBIAN-CVE-2018-10861
CVSS 3.0
8.1 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
Show 10 moreShow less
OSVRHSA-2018:2177 5.9

Red Hat Security Advisory: Red Hat Ceph Storage 3.0 security and bug fix update

Record
RHSA-2018:2177
CVSS 3.0
5.9 MediumCVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L
Updated
2026-11-02
OSVRHSA-2018:2261 5.9

Red Hat Security Advisory: Red Hat Ceph Storage 2.5 security, enhancement, and bug fix update

Record
RHSA-2018:2261
CVSS 3.0
5.9 MediumCVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2018-10861 8.1

A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can delete, create ceph storage pools and corrupt snapshot images. Ceph branches master, mimic, luminous and jewel are believed to be affected.

Record
UBUNTU-CVE-2018-10861
CVSS 3.0
8.1 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2019:1284-1 No score

Security update for ceph

This update for ceph version 13.2.4 fixes the following issues:

Security issues fixed:

  • CVE-2018-14662: Fixed an issue with LUKS 'config-key' safety (bsc#1111177)
  • CVE-2018-10861: Fixed an authorization bypass on OSD pool ops in ceph-mon (bsc#1099162)
  • CVE-2018-1128: Fixed signature check bypass in cephx (bsc#1096748)
  • CVE-2018-1129: Fixed replay attack in cephx protocol (bsc#1096748)
  • CVE-2018-16846: Enforced bounds on max-keys/max-uploads/max-parts in rgw (bsc#1114710)

Non-security issues fixed:

  • ceph-volume Python 3 fixes (bsc#1114567)
  • Fixed python3 module loading (bsc#1086613)
  • Fixed an issue where ceph build fails (bsc#1084645)
  • ceph's SPDK builds with march=native (bsc#1101262)

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:1284-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10676-1 No score

ceph-16.2.6.45+g8fda9838398-1.1 on GA media

These are all security issues fixed in the ceph-16.2.6.45+g8fda9838398-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10676-1
Updated
2026-11-02
OSVSUSE-SU-2018:1920-1 No score

Security update for ceph

This update for ceph to version ceph-12.2.5-419-g8cbf63d997 fixes the following issues:

  • CVE-2018-10861: Ensure that ceph-mon does perform authorization on all OSD pool ops (bsc#1099162).
  • CVE-2018-1129: cephx signature check bypass (bsc#1096748).
  • CVE-2018-1128: cephx protocol was vulnerable to replay attack (bsc#1096748).
Record
SUSE-SU-2018:1920-1
Updated
2026-11-02
OSVSUSE-SU-2018:2193-1 No score

Security update for ceph

This update for ceph fixes the following issues:

  • Update to version 12.2.7-420-gc0ef85b854:

    • https://ceph.com/releases/12-2-7-luminous-released/

    • luminous: osd: eternal stuck PG in 'unfound_recovery' (bsc#1094932)

    • bluestore: db.slow used when db is not full (bsc#1092874)

    • CVE-2018-10861: Ensure that ceph-mon does perform authorization on all OSD pool ops (bsc#1099162).

    • CVE-2018-1129: cephx signature check bypass (bsc#1096748).

    • CVE-2018-1128: cephx protocol was vulnerable to replay attack (bsc#1096748).

Record
SUSE-SU-2018:2193-1
Updated
2026-11-02
OSVSUSE-SU-2018:2299-1 No score

Security update for ceph

This update for ceph fixes the following issues:

Security issues fixed:

  • CVE-2018-10861: Fix ceph-mon authorization on OSD pool ops (bsc#1099162).
  • CVE-2018-1128: Fix cephx signature check bypass (bsc#1096748).
  • CVE-2018-1129: Fix cephx protocol vulnerability to replay attack (bsc#1096748).
  • CVE-2018-7262: Fix malformed http headers that can crash rgw (bsc#1081379).

Bug fixes:

  • bsc#1072512: multipart uploads are broken if the bucket has been resharded
  • bsc#1080112: rgw: user stats increased after bucket reshard
  • bsc#1086340: SES5: XFS metadata corruption on rbd-nbd mapped image with journaling feature enabled
Record
SUSE-SU-2018:2299-1
Updated
2026-11-02
OSVSUSE-SU-2018:2478-1 No score

Security update for ceph

This update for ceph fixes the following issues:

  • Update to version 12.2.7-420-gc0ef85b854:

    • https://ceph.com/releases/12-2-7-luminous-released/

    • luminous: osd: eternal stuck PG in 'unfound_recovery' (bsc#1094932)

    • bluestore: db.slow used when db is not full (bsc#1092874)

    • CVE-2018-10861: Ensure that ceph-mon does perform authorization on all OSD pool ops (bsc#1099162).

    • CVE-2018-1129: cephx signature check bypass (bsc#1096748).

    • CVE-2018-1128: cephx protocol was vulnerable to replay attack (bsc#1096748).

Record
SUSE-SU-2018:2478-1
Updated
2026-11-02
OSVSUSE-SU-2019:0586-1 No score

Security update for ceph

This update for ceph version 13.2.4 fixes the following issues:

Security issues fixed:

  • CVE-2018-14662: Fixed an issue with LUKS 'config-key' safety (bsc#1111177)
  • CVE-2018-10861: Fixed an authorization bypass on OSD pool ops in ceph-mon (bsc#1099162)
  • CVE-2018-1128: Fixed signature check bypass in cephx (bsc#1096748)
  • CVE-2018-1129: Fixed replay attack in cephx protocol (bsc#1096748)
  • CVE-2018-16846: Enforced bounds on max-keys/max-uploads/max-parts in rgw

Non-security issues fixed:

  • ceph-volume Python 3 fixes (bsc#1114567)
  • fix python3 module loading (bsc#1086613)
Record
SUSE-SU-2019:0586-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ceph
Debian:12
 before 12.2.8+dfsg1-1
12.2.8+dfsg1-1
ceph
Debian:13
 before 12.2.8+dfsg1-1
12.2.8+dfsg1-1
ceph
Debian:14
 before 12.2.8+dfsg1-1
12.2.8+dfsg1-1
ceph
Debian:9
 before 10.2.11-1, plus listed versions
10.2.5-7.210.2.7-0exp1
10.2.11-1
ceph
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
ceph-base
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
ceph-common
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
ceph-debuginfo
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
ceph-mgr
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
ceph-mon
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
Show 64 moreShow less
Affected packages
PackageAffectedFixed
ceph-selinux
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
ceph-test
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
cephmetrics
Red Hat:ceph_storage:3::el7
 before 0:1.0.1-1.el7cp
0:1.0.1-1.el7cp
cephmetrics-collectors
Red Hat:ceph_storage:3::el7
 before 0:1.0.1-1.el7cp
0:1.0.1-1.el7cp
libcephfs-devel
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
libcephfs2
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
librados-devel
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
librados2
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
libradosstriper1
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
librbd-devel
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
librbd1
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
librgw-devel
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
librgw2
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
python-cephfs
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
python-rados
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
python-rbd
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
python-rgw
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
ceph-osd
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
ceph-ansible
Red Hat:ceph_storage:3::el7
 before 0:3.0.39-1.el7cp
0:3.0.39-1.el7cp
ceph-fuse
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
ceph-mds
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
ceph-radosgw
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
cephmetrics-ansible
Red Hat:ceph_storage:3::el7
 before 0:1.0.1-1.el7cp
0:1.0.1-1.el7cp
cephmetrics-grafana-plugins
Red Hat:ceph_storage:3::el7
 before 0:1.0.1-1.el7cp
0:1.0.1-1.el7cp
nfs-ganesha
Red Hat:ceph_storage:3::el7
 before 0:2.5.5-6.el7cp
0:2.5.5-6.el7cp
nfs-ganesha-ceph
Red Hat:ceph_storage:3::el7
 before 0:2.5.5-6.el7cp
0:2.5.5-6.el7cp
nfs-ganesha-debuginfo
Red Hat:ceph_storage:3::el7
 before 0:2.5.5-6.el7cp
0:2.5.5-6.el7cp
nfs-ganesha-rgw
Red Hat:ceph_storage:3::el7
 before 0:2.5.5-6.el7cp
0:2.5.5-6.el7cp
rbd-mirror
Red Hat:ceph_storage:3::el7
 before 2:12.2.4-30.el7cp
2:12.2.4-30.el7cp
ceph
Red Hat:ceph_storage:2::el7
 before 2:10.2.10-28.el7cp
2:10.2.10-28.el7cp
ceph-ansible
Red Hat:ceph_storage:2::el7
 before 0:3.0.39-1.el7cp
0:3.0.39-1.el7cp
ceph-base
Red Hat:ceph_storage:2::el7
 before 2:10.2.10-28.el7cp
2:10.2.10-28.el7cp
ceph-common
Red Hat:ceph_storage:2::el7
 before 2:10.2.10-28.el7cp
2:10.2.10-28.el7cp
ceph-debuginfo
Red Hat:ceph_storage:2::el7
 before 2:10.2.10-28.el7cp
2:10.2.10-28.el7cp
ceph-fuse
Red Hat:ceph_storage:2::el7
 before 2:10.2.10-28.el7cp
2:10.2.10-28.el7cp
ceph-mds
Red Hat:ceph_storage:2::el7
 before 2:10.2.10-28.el7cp
2:10.2.10-28.el7cp
ceph-radosgw
Red Hat:ceph_storage:2::el7
 before 2:10.2.10-28.el7cp
2:10.2.10-28.el7cp
ceph-selinux
Red Hat:ceph_storage:2::el7
 before 2:10.2.10-28.el7cp
2:10.2.10-28.el7cp
libcephfs1
Red Hat:ceph_storage:2::el7
 before 2:10.2.10-28.el7cp
2:10.2.10-28.el7cp
libcephfs1-devel
Red Hat:ceph_storage:2::el7
 before 2:10.2.10-28.el7cp
2:10.2.10-28.el7cp
librados2
Red Hat:ceph_storage:2::el7
 before 2:10.2.10-28.el7cp
2:10.2.10-28.el7cp
librados2-devel
Red Hat:ceph_storage:2::el7
 before 2:10.2.10-28.el7cp
2:10.2.10-28.el7cp
librbd1
Red Hat:ceph_storage:2::el7
 before 2:10.2.10-28.el7cp
2:10.2.10-28.el7cp
librbd1-devel
Red Hat:ceph_storage:2::el7
 before 2:10.2.10-28.el7cp
2:10.2.10-28.el7cp
librgw2
Red Hat:ceph_storage:2::el7
 before 2:10.2.10-28.el7cp
2:10.2.10-28.el7cp
librgw2-devel
Red Hat:ceph_storage:2::el7
 before 2:10.2.10-28.el7cp
2:10.2.10-28.el7cp
python-cephfs
Red Hat:ceph_storage:2::el7
 before 2:10.2.10-28.el7cp
2:10.2.10-28.el7cp
python-rados
Red Hat:ceph_storage:2::el7
 before 2:10.2.10-28.el7cp
2:10.2.10-28.el7cp
python-rbd
Red Hat:ceph_storage:2::el7
 before 2:10.2.10-28.el7cp
2:10.2.10-28.el7cp
rbd-mirror
Red Hat:ceph_storage:2::el7
 before 2:10.2.10-28.el7cp
2:10.2.10-28.el7cp
ceph-mon
Red Hat:ceph_storage:2::el7
 before 2:10.2.10-28.el7cp
2:10.2.10-28.el7cp
ceph-test
Red Hat:ceph_storage:2::el7
 before 2:10.2.10-28.el7cp
2:10.2.10-28.el7cp
ceph-osd
Red Hat:ceph_storage:2::el7
 before 2:10.2.10-28.el7cp
2:10.2.10-28.el7cp
ceph
SUSE:Enterprise Storage 5
 before 12.2.5+git.1530082629.8cbf63d997-2.16.1
12.2.5+git.1530082629.8cbf63d997-2.16.1
ceph
SUSE:Linux Enterprise Desktop 12 SP3
 before 12.2.7+git.1531910353.c0ef85b854-2.12.1
12.2.7+git.1531910353.c0ef85b854-2.12.1
ceph
SUSE:Linux Enterprise Software Development Kit 12 SP3
 before 12.2.7+git.1531910353.c0ef85b854-2.12.1
12.2.7+git.1531910353.c0ef85b854-2.12.1
ceph
SUSE:Linux Enterprise Server 12 SP3
 before 12.2.7+git.1531910353.c0ef85b854-2.12.1
12.2.7+git.1531910353.c0ef85b854-2.12.1
ceph
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 12.2.7+git.1531910353.c0ef85b854-2.12.1
12.2.7+git.1531910353.c0ef85b854-2.12.1
ceph
SUSE:Enterprise Storage 4
 before 10.2.11+git.1531487710.3a12911a2e-12.14.2
10.2.11+git.1531487710.3a12911a2e-12.14.2
ceph-test
SUSE:Enterprise Storage 4
 before 10.2.11+git.1531487710.3a12911a2e-12.14.2
10.2.11+git.1531487710.3a12911a2e-12.14.2
ceph
SUSE:Linux Enterprise Module for Basesystem 15
 before 13.2.4.125+gad802694f5-3.7.2
13.2.4.125+gad802694f5-3.7.2
ceph
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
0.67.4-0ubuntu20.67.4-0ubuntu30.72-0ubuntu10.72.1-0ubuntu10.72.1-2
Show 21 moreShow less
0.72.1-30.72.2-10.72.2-20.78-0ubuntu10.79-0ubuntu10.80.1-0ubuntu10.80.1-0ubuntu1.10.80.5-0ubuntu0.14.04.10.80.7-0ubuntu0.14.04.10.80.9-0ubuntu0.14.04.10.80.9-0ubuntu0.14.04.20.80.10-0ubuntu0.14.04.10.80.10-0ubuntu1.14.04.20.80.10-0ubuntu1.14.04.30.80.11-0ubuntu1.14.04.10.80.11-0ubuntu1.14.04.20.80.11-0ubuntu1.14.04.30.80.11-0ubuntu1.14.04.40.80.11-0ubuntu1.14.04.4+esm20.80.11-0ubuntu1.14.04.4+esm30.80.11-0ubuntu1.14.04.4+esm4
 None known
ceph
openSUSE:Leap 15.0
 before 13.2.4.125+gad802694f5-lp150.2.3.1
13.2.4.125+gad802694f5-lp150.2.3.1
ceph-test
openSUSE:Leap 15.0
 before 13.2.4.125+gad802694f5-lp150.2.3.1
13.2.4.125+gad802694f5-lp150.2.3.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-10861 is a high vulnerability (CVSS 8.1) in Ceph, published July 10, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.18%, the 88th percentile. Fixed in ceph 12.2.8+dfsg1-1.

References

Show 95 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open