{"id":"CVE-2020-25660","aliases":["ALPINE-CVE-2020-25660","DEBIAN-CVE-2020-25660","EUVD-2020-18322","GHSA-457q-vj84-7r8r","RHSA-2020:5325","RHSA-2021:0081","SUSE-SU-2020:3459-1","SUSE-SU-2020:3473-1","SUSE-SU-2020:3473-2","SUSE-SU-2020:3539-1","UBUNTU-CVE-2020-25660","USN-4706-1","openSUSE-SU-2020:2057-1","openSUSE-SU-2020:2082-1","openSUSE-SU-2024:11652-1"],"status":"published","title":"A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2...","description":"A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2.14, where it does not verify Ceph clients correctly and is then vulnerable to replay attacks in Nautilus. This flaw allows an attacker with access to the Ceph cluster network to authenticate with the Ceph service via a packet sniffer and perform actions allowed by the Ceph service. This issue is a reintroduction of CVE-2018-1128, affecting the msgr2 protocol. The msgr 2 protocol is used for all communication except older clients that do not support the msgr2 protocol. The msgr1 protocol is not affected. The highest threat from this vulnerability is to confidentiality, integrity, and system availability.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01034,"percentile":0.64092,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-294"],"published":"2020-11-20T11:14:40Z","modified":"2026-11-03T06:32:31Z","fixes":[{"ecosystem":"Alpine:v3.11","package":"ceph","fixed_in":["14.2.19-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"ceph","fixed_in":["14.2.19-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"ceph","fixed_in":["15.2.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"ceph","fixed_in":["15.2.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"ceph","fixed_in":["15.2.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"ceph","fixed_in":["15.2.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"ceph16","fixed_in":["15.2.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"ceph16","fixed_in":["15.2.6-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"ceph","fixed_in":["14.2.15-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ceph","fixed_in":["14.2.15-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ceph","fixed_in":["14.2.15-1"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-base","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-common","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-debuginfo","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-grafana-dashboards","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr-dashboard","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr-diskprediction-local","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr-k8sevents","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr-rook","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mon","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-selinux","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-test","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"libcephfs-devel","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"libcephfs2","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"librados-devel","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"librados2","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"libradospp-devel","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"libradosstriper1","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"librbd-devel","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"librbd1","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"librgw-devel","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"librgw2","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-ceph-argparse","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-cephfs","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-rados","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-rbd","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-rgw","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-osd","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-fuse","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mds","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-radosgw","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"rbd-mirror","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el7","package":"rbd-nbd","fixed_in":["2:14.2.8-115.el7cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-base","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-base-debuginfo","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-common","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-common-debuginfo","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-debugsource","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-fuse-debuginfo","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-grafana-dashboards","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mds-debuginfo","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-dashboard","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-debuginfo","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-diskprediction-local","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-k8sevents","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-rook","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mon","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mon-debuginfo","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-osd-debuginfo","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-radosgw-debuginfo","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-selinux","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-test","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-test-debuginfo","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"libcephfs-devel","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"libcephfs2","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"libcephfs2-debuginfo","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"librados-devel","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"librados-devel-debuginfo","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"librados2","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"librados2-debuginfo","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"libradospp-devel","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"libradosstriper1","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"libradosstriper1-debuginfo","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"librbd-devel","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"librbd1","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"librbd1-debuginfo","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"librgw-devel","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"librgw2","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"librgw2-debuginfo","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-ceph-argparse","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-cephfs","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-cephfs-debuginfo","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rados","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rados-debuginfo","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rbd","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rbd-debuginfo","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rgw","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rgw-debuginfo","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-fuse-debuginfo","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-mirror-debuginfo","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-nbd-debuginfo","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-osd","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-fuse","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mds","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-radosgw","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-mirror","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-nbd","fixed_in":["2:14.2.8-115.el8cp"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"ceph","fixed_in":["14.2.13.450+g65ea1b614d-3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"ceph","fixed_in":["14.2.13.450+g65ea1b614d-3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"ceph","fixed_in":["15.2.5.667+g1a579d5bf2-3.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"ceph","fixed_in":["15.2.5.667+g1a579d5bf2-3.5.1","15.2.5.667+g1a579d5bf2-3.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"ceph","fixed_in":["15.2.7-0ubuntu0.20.04.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"ceph","fixed_in":["14.2.13.450+g65ea1b614d-lp151.2.28.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"ceph-test","fixed_in":["14.2.13.450+g65ea1b614d-lp151.2.28.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"ceph","fixed_in":["15.2.5.667+g1a579d5bf2-lp152.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"ceph-test","fixed_in":["15.2.5.667+g1a579d5bf2-lp152.2.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.11","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.0.0"},{"fixed":"14.2.19-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.0.0"},{"fixed":"14.2.19-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.0.0"},{"fixed":"15.2.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.0.0"},{"fixed":"15.2.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.0.0"},{"fixed":"15.2.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"15.0.0"},{"fixed":"15.2.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"ceph16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"ceph16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2.6-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.15-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.15-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.15-1"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-grafana-dashboards","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr-diskprediction-local","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr-k8sevents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr-rook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-osd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-radosgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"rbd-mirror","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el7cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-grafana-dashboards","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mds-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-diskprediction-local","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-k8sevents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-rook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-osd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-radosgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libcephfs2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librados-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librados2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libradosstriper1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librbd1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librgw2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-cephfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rados-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-nbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-osd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-radosgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-mirror","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.8-115.el8cp"}]}]},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-grafana-dashboards","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr-diskprediction-local","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr-k8sevents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mgr-rook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"python-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-osd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-mds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-radosgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"rbd-mirror","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-grafana-dashboards","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mds-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-diskprediction-local","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-k8sevents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mgr-rook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-osd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-radosgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libcephfs2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librados-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librados2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"libradosstriper1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librbd1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"librgw2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-cephfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rados-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"python3-rgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-nbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-osd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-mds","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-radosgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-mirror","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:14.2.11-95.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el7","package":"ceph-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.41-1.el7cp"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:ceph_storage:4::el8","package":"ceph-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.41-1.el8cp"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.13.450+g65ea1b614d-3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.13.450+g65ea1b614d-3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2.5.667+g1a579d5bf2-3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2.5.667+g1a579d5bf2-3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2.5.667+g1a579d5bf2-3.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2.7-0ubuntu0.20.04.2"}]}],"versions":["14.2.2-0ubuntu3","14.2.2-0ubuntu4","14.2.4-0ubuntu1","14.2.4-0ubuntu2","14.2.4-0ubuntu3","15.1.0-0ubuntu2","15.1.0-0ubuntu3","15.1.1-0ubuntu1","15.2.0-0ubuntu1","15.2.0-0ubuntu2","15.2.1-0ubuntu1","15.2.1-0ubuntu2","15.2.3-0ubuntu0.20.04.1","15.2.3-0ubuntu0.20.04.2","15.2.5-0ubuntu0.20.04.1","15.2.7-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2.7-0ubuntu0.20.04.2"}]}],"versions":["14.2.2-0ubuntu3","14.2.2-0ubuntu4","14.2.4-0ubuntu1","14.2.4-0ubuntu2","14.2.4-0ubuntu3","15.1.0-0ubuntu2","15.1.0-0ubuntu3","15.1.1-0ubuntu1","15.2.0-0ubuntu1","15.2.0-0ubuntu2","15.2.1-0ubuntu1","15.2.1-0ubuntu2","15.2.3-0ubuntu0.20.04.1","15.2.3-0ubuntu0.20.04.2","15.2.5-0ubuntu0.20.04.1","15.2.7-0ubuntu0.20.04.1"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.13.450+g65ea1b614d-lp151.2.28.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"ceph-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.13.450+g65ea1b614d-lp151.2.28.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2.5.667+g1a579d5bf2-lp152.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"ceph-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2.5.667+g1a579d5bf2-lp152.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.2.6.463+g22e7612f9ad-1.1"}]}],"bundled":4}],"products":[{"vendor":"ceph","product":"ceph"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"redhat","product":"ceph"},{"vendor":"redhat","product":"ceph_storage"},{"vendor":"redhat","product":"openshift_container_platform"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1890354","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://ceph.io/community/v15-2-6-octopus-released/","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory","advisory","article"]},{"url":"https://ceph.io/releases/v14-2-14-nautilus-released/","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory","advisory","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBC4KZ44QUQENTYZPVHORGL4K2KV5V4F/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/202105-39","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25660","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UBC4KZ44QUQENTYZPVHORGL4K2KV5V4F/"},{"url":"https://github.com/advisories/GHSA-457q-vj84-7r8r"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-25660","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-25660","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:5325","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1892644","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1895040","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1896555","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5325.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25660","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25660","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0081","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1582280","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1731158","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1763021","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1774428","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1774605","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1786106","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1791911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1800382","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1826690","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828246","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1829214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1830375","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1831299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1831682","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1836431","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1841436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1845501","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1847166","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1850947","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1855148","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1855439","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1855448","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1856916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1856960","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1856981","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1857414","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1859180","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1859679","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1859872","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1860057","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1860073","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1860739","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1861755","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1866257","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1866308","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1866834","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1867697","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1867698","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1868638","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1869797","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1872006","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1872028","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1872030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1872033","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1872459","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1872879","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1873221","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1873915","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1874756","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1875628","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1875736","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1876692","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1876976","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1877300","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1877413","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1877737","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1877745","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1877910","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1878145","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1878250","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1878267","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1878268","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1878271","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1878500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879819","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1880188","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1880252","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1880458","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1880476","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1881288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1881313","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1881523","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1882426","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1882484","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1882705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1883283","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1884023","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1885693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1886461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1886534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1886653","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1886670","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1886677","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1887716","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1889426","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1889668","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1889712","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1889963","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1890439","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1891098","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1892108","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1892173","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1892295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1892387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1893740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1893989","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1894702","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1896587","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1897995","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1898486","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1898599","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1898856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1899860","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1900109","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1902034","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1902149","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1902281","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1903612","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1904340","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1904958","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0081.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25677","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25677","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25677","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-27781","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27781","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27781","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203459-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1151612","tags":["report"]},{"url":"https://bugzilla.suse.com/1158257","tags":["report"]},{"url":"https://bugzilla.suse.com/1169134","tags":["report"]},{"url":"https://bugzilla.suse.com/1170487","tags":["report"]},{"url":"https://bugzilla.suse.com/1174591","tags":["report"]},{"url":"https://bugzilla.suse.com/1175061","tags":["report"]},{"url":"https://bugzilla.suse.com/1175240","tags":["report"]},{"url":"https://bugzilla.suse.com/1175781","tags":["report"]},{"url":"https://bugzilla.suse.com/1177843","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25660","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203473-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1163764","tags":["report"]},{"url":"https://bugzilla.suse.com/1170200","tags":["report"]},{"url":"https://bugzilla.suse.com/1170498","tags":["report"]},{"url":"https://bugzilla.suse.com/1173079","tags":["report"]},{"url":"https://bugzilla.suse.com/1174466","tags":["report"]},{"url":"https://bugzilla.suse.com/1174529","tags":["report"]},{"url":"https://bugzilla.suse.com/1174644","tags":["report"]},{"url":"https://bugzilla.suse.com/1175120","tags":["report"]},{"url":"https://bugzilla.suse.com/1175161","tags":["report"]},{"url":"https://bugzilla.suse.com/1175169","tags":["report"]},{"url":"https://bugzilla.suse.com/1176451","tags":["report"]},{"url":"https://bugzilla.suse.com/1176499","tags":["report"]},{"url":"https://bugzilla.suse.com/1176638","tags":["report"]},{"url":"https://bugzilla.suse.com/1177078","tags":["report"]},{"url":"https://bugzilla.suse.com/1177151","tags":["report"]},{"url":"https://bugzilla.suse.com/1177319","tags":["report"]},{"url":"https://bugzilla.suse.com/1177344","tags":["report"]},{"url":"https://bugzilla.suse.com/1177450","tags":["report"]},{"url":"https://bugzilla.suse.com/1177643","tags":["report"]},{"url":"https://bugzilla.suse.com/1177676","tags":["report"]},{"url":"https://bugzilla.suse.com/1177933","tags":["report"]},{"url":"https://bugzilla.suse.com/1178073","tags":["report"]},{"url":"https://bugzilla.suse.com/1178531","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203473-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203539-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-25660","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2020/11/17/4","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4706-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-10736","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-10753","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SYSOMAWYA2XHVHZ46F322TCUWNWMG4GU/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VWM64T57Y7IVDW2JWVLZSHPUKMYGWGAH/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27839","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-25660","description":"A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2.14, where it does not verify Ceph clients correctly and is then vulnerable to replay attacks in Nautilus. This flaw allows an attacker with access to the Ceph cluster network to authenticate with the Ceph service via a packet sniffer and perform actions allowed by the Ceph service. This issue is a reintroduction of CVE-2018-1128, affecting the msgr2 protocol. The msgr 2 protocol is used for all communication except older clients that do not support the msgr2 protocol. The msgr1 protocol is not affected. The highest threat from this vulnerability is to confidentiality, integrity, and system availability.","status":"published","published":"2020-11-23T21:18:28Z","modified":"2024-08-04T15:40:36.786Z","cwes":["CWE-294"],"updated_at":"2026-11-02T14:35:48.52216Z"}],"euvd":[{"id":"EUVD-2020-18322","description":"A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2.14, where it does not verify Ceph clients correctly and is then vulnerable to replay attacks in Nautilus. This flaw allows an attacker with access to the Ceph cluster network to authenticate with the Ceph service via a packet sniffer and perform actions allowed by the Ceph service. This issue is a reintroduction of CVE-2018-1128, affecting the msgr2 protocol. The msgr 2 protocol is used for all communication except older clients that do not support the msgr2 protocol. The msgr1 protocol is not affected. The highest threat from this vulnerability is to confidentiality, integrity, and system availability.","status":"published","published":"2020-11-23T21:18:28Z","modified":"2024-08-04T15:40:36Z","updated_at":"2026-11-03T03:07:17.317062Z"}],"ghsa":[{"id":"GHSA-457q-vj84-7r8r","title":"A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2...","description":"A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2.14, where it does not verify Ceph clients correctly and is then vulnerable to replay attacks in Nautilus. This flaw allows an attacker with access to the Ceph cluster network to authenticate with the Ceph service via a packet sniffer and perform actions allowed by the Ceph service. This issue is a reintroduction of CVE-2018-1128, affecting the msgr2 protocol. The msgr 2 protocol is used for all communication except older clients that do not support the msgr2 protocol. The msgr1 protocol is not affected. The highest threat from this vulnerability is to confidentiality, integrity, and system availability.","status":"published","published":"2022-05-24T17:34:49Z","modified":"2023-01-29T05:04:33Z","cwes":["CWE-294"],"updated_at":"2026-11-02T14:45:35.161944Z"}],"nvd":[{"id":"CVE-2020-25660","description":"A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2.14, where it does not verify Ceph clients correctly and is then vulnerable to replay attacks in Nautilus. This flaw allows an attacker with access to the Ceph cluster network to authenticate with the Ceph service via a packet sniffer and perform actions allowed by the Ceph service. This issue is a reintroduction of CVE-2018-1128, affecting the msgr2 protocol. The msgr 2 protocol is used for all communication except older clients that do not support the msgr2 protocol. The msgr1 protocol is not affected. The highest threat from this vulnerability is to confidentiality, integrity, and system availability.","status":"published","published":"2020-11-23T22:15:12.037Z","modified":"2026-06-17T03:07:04.703Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5.8,"vector":"AV:A/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-294"],"updated_at":"2026-11-02T14:06:25.394006Z"}],"osv":[{"id":"ALPINE-CVE-2020-25660","description":"A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2.14, where it does not verify Ceph clients correctly and is then vulnerable to replay attacks in Nautilus. This flaw allows an attacker with access to the Ceph cluster network to authenticate with the Ceph service via a packet sniffer and perform actions allowed by the Ceph service. This issue is a reintroduction of CVE-2018-1128, affecting the msgr2 protocol. The msgr 2 protocol is used for all communication except older clients that do not support the msgr2 protocol. The msgr1 protocol is not affected. The highest threat from this vulnerability is to confidentiality, integrity, and system availability.","status":"published","published":"2020-11-23T22:15:12.037Z","modified":"2026-11-03T06:32:31.055371753Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:41.158523Z"},{"id":"CVE-2020-25660","description":"A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2.14, where it does not verify Ceph clients correctly and is then vulnerable to replay attacks in Nautilus. This flaw allows an attacker with access to the Ceph cluster network to authenticate with the Ceph service via a packet sniffer and perform actions allowed by the Ceph service. This issue is a reintroduction of CVE-2018-1128, affecting the msgr2 protocol. The msgr 2 protocol is used for all communication except older clients that do not support the msgr2 protocol. The msgr1 protocol is not affected. The highest threat from this vulnerability is to confidentiality, integrity, and system availability.","status":"published","published":"2020-11-23T22:15:12.037Z","modified":"2026-10-24T10:30:55.643386127Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:15.879068Z"},{"id":"DEBIAN-CVE-2020-25660","description":"A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2.14, where it does not verify Ceph clients correctly and is then vulnerable to replay attacks in Nautilus. This flaw allows an attacker with access to the Ceph cluster network to authenticate with the Ceph service via a packet sniffer and perform actions allowed by the Ceph service. This issue is a reintroduction of CVE-2018-1128, affecting the msgr2 protocol. The msgr 2 protocol is used for all communication except older clients that do not support the msgr2 protocol. The msgr1 protocol is not affected. The highest threat from this vulnerability is to confidentiality, integrity, and system availability.","status":"published","published":"2020-11-23T22:15:12.037Z","modified":"2026-10-26T12:01:47.444066746Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:33.729655Z"},{"id":"RHSA-2020:5325","title":"Red Hat Security Advisory: Red Hat Ceph Storage 4.1 security and bug fix update","status":"published","published":"2024-09-16T04:46:58Z","modified":"2026-06-26T12:21:13.965657432Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"RHSA-2021:0081","title":"Red Hat Security Advisory: Red Hat Ceph Storage 4.2 Security and Bug Fix update","status":"published","published":"2024-09-16T04:47:07Z","modified":"2026-08-19T10:01:21Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"UBUNTU-CVE-2020-25660","description":"A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2.14, where it does not verify Ceph clients correctly and is then vulnerable to replay attacks in Nautilus. This flaw allows an attacker with access to the Ceph cluster network to authenticate with the Ceph service via a packet sniffer and perform actions allowed by the Ceph service. This issue is a reintroduction of CVE-2018-1128, affecting the msgr2 protocol. The msgr 2 protocol is used for all communication except older clients that do not support the msgr2 protocol. The msgr1 protocol is not affected. The highest threat from this vulnerability is to confidentiality, integrity, and system availability.","status":"published","published":"2020-11-23T22:15:00Z","modified":"2026-04-22T12:35:39.61929Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:23.905183Z"},{"id":"openSUSE-SU-2020:2057-1","title":"Security update for ceph","description":"This update for ceph fixes the following issues:\n\n- CVE-2020-25660: Bring back CEPHX_V2 authorizer challenges (bsc#1177843).\n- Major batch refactor of ceph-volume that addresses a couple of issues (bsc#1151612, bsc#1158257)\n- Documented Prometheus' security model (bsc#1169134)\n- monclient: Fixed an issue where executing several ceph commands in a short amount of time led to a segmentation fault (bsc#1170487)\n- Fixed an issue, where it was not possible to edit an iSCSI logged-in client (bsc#1174591)\n- Fixed an issue, where OSDs could not get started after they failed (bsc#1175061)\n- Fixed an issue with the restful module, where it aborted on execution for POST calls (bsc#1175240)\n- Fixed a many-to-many issue in host-details Grafana dashboard (bsc#1175585)\n- Fixed collection_list ordering in os/bluestore (bsc#1172546)\n- Fixed help output of lvmcache (bsc#1175781)\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2020-11-26T23:24:56Z","modified":"2026-02-04T02:16:21.315489Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:2082-1","title":"Security update for ceph","description":"This update for ceph fixes the following issues:\n\n- CVE-2020-25660: Bring back CEPHX_V2 authorizer challenges (bsc#1177843).\n- Added --container-init feature (bsc#1177319, bsc#1163764)\n- Made journald as the logdriver again (bsc#1177933)\n- Fixes a condition check for copy_tree, copy_files, and move_files in cephadm (bsc#1177676)\n- Fixed a bug where device_health_metrics pool gets created even without any OSDs in the cluster (bsc#1173079)\n- Log cephadm output /var/log/ceph/cephadm.log (bsc#1174644)\n- Fixed a bug where the orchestrator didn't come up anymore after the deletion of OSDs (bsc#1176499)\n- Fixed a bug where cephadm fails to deploy all OSDs and gets stuck (bsc#1177450)\n- python-common will no longer skip unavailable disks (bsc#1177151)\n- Added snap-schedule module (jsc#SES-704)\n- Updated the SES7 downstream branding (bsc#1175120, bsc#1175161, bsc#1175169, bsc#1170498)\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2020-11-27T13:25:43Z","modified":"2026-02-04T03:33:12.293972Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2024:11652-1","title":"ceph-16.2.6.463+g22e7612f9ad-1.1 on GA media","description":"These are all security issues fixed in the ceph-16.2.6.463+g22e7612f9ad-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:15:38.320101Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2020:3459-1","title":"Security update for ceph","description":"This update for ceph fixes the following issues:\n\n- CVE-2020-25660: Bring back CEPHX_V2 authorizer challenges (bsc#1177843).\n- Major batch refactor of ceph-volume that addresses a couple of issues (bsc#1151612, bsc#1158257)\n- Documented Prometheus' security model (bsc#1169134)\n- monclient: Fixed an issue where executing several ceph commands in a short amount of time led to a segmentation fault (bsc#1170487)\n- Fixed an issue, where it was not possible to edit an iSCSI logged-in client (bsc#1174591)\n- Fixed an issue, where OSDs could not get started after they failed (bsc#1175061)\n- Fixed an issue with the restful module, where it aborted on execution for POST calls (bsc#1175240)\n- Fixed a many-to-many issue in host-details Grafana dashboard (bsc#1175585)\n- Fixed collection_list ordering in os/bluestore (bsc#1172546)\n- Fixed help output of lvmcache (bsc#1175781)\n","status":"published","published":"2020-11-20T11:14:40Z","modified":"2026-02-04T02:33:15.966559Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:3473-1","title":"Security update for ceph","description":"This update for ceph fixes the following issues:\n\n- CVE-2020-25660: Bring back CEPHX_V2 authorizer challenges (bsc#1177843).\n- Added --container-init feature (bsc#1177319, bsc#1163764)\n- Made journald as the logdriver again (bsc#1177933)\n- Fixes a condition check for copy_tree, copy_files, and move_files in cephadm (bsc#1177676)\n- Fixed a bug where device_health_metrics pool gets created even without any OSDs in the cluster (bsc#1173079)\n- Log cephadm output /var/log/ceph/cephadm.log (bsc#1174644)\n- Fixed a bug where the orchestrator didn't come up anymore after the deletion of OSDs (bsc#1176499)\n- Fixed a bug where cephadm fails to deploy all OSDs and gets stuck (bsc#1177450)\n- python-common will no longer skip unavailable disks (bsc#1177151)\n- Added snap-schedule module (jsc#SES-704)\n- Updated the SES7 downstream branding (bsc#1175120, bsc#1175161, bsc#1175169, bsc#1170498)\n","status":"published","published":"2020-11-20T18:08:38Z","modified":"2026-02-04T03:28:59.95912Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:3473-2","title":"Security update for ceph","description":"This update for ceph fixes the following issues:\n\n- CVE-2020-25660: Bring back CEPHX_V2 authorizer challenges (bsc#1177843).\n- Added --container-init feature (bsc#1177319, bsc#1163764)\n- Made journald as the logdriver again (bsc#1177933)\n- Fixes a condition check for copy_tree, copy_files, and move_files in cephadm (bsc#1177676)\n- Fixed a bug where device_health_metrics pool gets created even without any OSDs in the cluster (bsc#1173079)\n- Log cephadm output /var/log/ceph/cephadm.log (bsc#1174644)\n- Fixed a bug where the orchestrator didn't come up anymore after the deletion of OSDs (bsc#1176499)\n- Fixed a bug where cephadm fails to deploy all OSDs and gets stuck (bsc#1177450)\n- python-common will no longer skip unavailable disks (bsc#1177151)\n- Added snap-schedule module (jsc#SES-704)\n- Updated the SES7 downstream branding (bsc#1175120, bsc#1175161, bsc#1175169, bsc#1170498)\n","status":"published","published":"2020-11-26T17:15:41Z","modified":"2026-02-04T03:27:03.985166Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:3539-1","title":"Security update for ceph","description":"This update for ceph fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2020-25660: Bring back CEPHX_V2 authorizer challenges (bsc#1177843).\n\n- mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically (bsc#1170200)\n- mon: have 'mon stat' output json as well (bsc#1174466)\n- mgr/dashboard: support Orchestrator and user-defined Ganesha cluster (bsc#1177344)\n- mgr/dashboard: fix downstream NFS doc links (bsc#1178073)\n- cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph (bsc#1178531)\n","status":"published","published":"2020-11-26T14:52:36Z","modified":"2026-02-04T02:16:01.949863Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"USN-4706-1","title":"ceph vulnerabilities","description":"Olle Segerdahl found that ceph-mon and ceph-mgr daemons did not properly\nrestrict access, resulting in gaining access to unauthorized resources. An\nauthenticated user could use this vulnerability to modify the configuration and\npossibly conduct further attacks. (CVE-2020-10736)\n\nAdam Mohammed found that Ceph Object Gateway was vulnerable to HTTP header\ninjection via a CORS ExposeHeader tag. An attacker could use this to gain access\nor cause a crash. (CVE-2020-10753)\n\nIlya Dryomov found that Cephx authentication did not verify Ceph clients\ncorrectly and was then vulnerable to replay attacks in Nautilus. An attacker\ncould use the Ceph cluster network to authenticate via a packet sniffer and\nperform actions. This issue is a reintroduction of CVE-2018-1128.\n(CVE-2020-25660)\n","status":"published","published":"2021-01-28T13:40:18Z","modified":"2026-04-22T10:10:33.981989Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}