This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2018-14662 →

DEBIAN-CVE-2018-14662

It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph di...

Original description

The description as published by the source.

It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 ceph

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.11+dfsg1-1"}]}]

Debian:13 ceph

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.11+dfsg1-1"}]}]

Debian:14 ceph

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.2.11+dfsg1-1"}]}]

References

advisory security-tracker.debian.org