Vulnerability-Lookup

ubuntu-cve-2021-3979

Vulnerability from osv_ubuntu

Published

2022-08-25 20:15

Modified

2026-04-22 07:39

Summary

Details

A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.

Severity

6.5 (Medium)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2021-3979	REPORT
	https://www.openwall.com/lists/oss-security/2022/…	REPORT
	https://www.openwall.com/lists/oss-security/2022/…	REPORT
	https://ubuntu.com/security/notices/USN-6063-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2021-3979	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "ceph",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "ceph-base",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "ceph-common",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "ceph-fuse",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "ceph-mds",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "ceph-mgr",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "ceph-mon",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "ceph-osd",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "ceph-resource-agents",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "ceph-test",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "libcephfs-java",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "libcephfs-jni",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "libcephfs2",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "librados2",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "libradosstriper1",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "librbd1",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "librgw2",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "python-ceph",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "python-cephfs",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "python-rados",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "python-rbd",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "python-rgw",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "python3-ceph-argparse",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "python3-cephfs",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "python3-rados",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "python3-rbd",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "python3-rgw",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "radosgw",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "rbd-fuse",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "rbd-mirror",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "rbd-nbd",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "ceph",
        "purl": "pkg:deb/ubuntu/ceph@12.2.13-0ubuntu0.18.04.11?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "12.2.13-0ubuntu0.18.04.11"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "12.2.0-0ubuntu1",
        "12.2.1-0ubuntu1",
        "12.2.2-0ubuntu1",
        "12.2.2-0ubuntu2",
        "12.2.4-0ubuntu1",
        "12.2.4-0ubuntu1.1",
        "12.2.7-0ubuntu0.18.04.1",
        "12.2.8-0ubuntu0.18.04.1",
        "12.2.8-0ubuntu0.18.04.2",
        "12.2.11-0ubuntu0.18.04.1",
        "12.2.11-0ubuntu0.18.04.2",
        "12.2.12-0ubuntu0.18.04.1",
        "12.2.12-0ubuntu0.18.04.2",
        "12.2.12-0ubuntu0.18.04.3",
        "12.2.12-0ubuntu0.18.04.4",
        "12.2.12-0ubuntu0.18.04.5",
        "12.2.13-0ubuntu0.18.04.2",
        "12.2.13-0ubuntu0.18.04.3",
        "12.2.13-0ubuntu0.18.04.4",
        "12.2.13-0ubuntu0.18.04.5",
        "12.2.13-0ubuntu0.18.04.6",
        "12.2.13-0ubuntu0.18.04.7",
        "12.2.13-0ubuntu0.18.04.8",
        "12.2.13-0ubuntu0.18.04.10"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "ceph",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-base",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-common",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-fuse",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-immutable-object-cache",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-mds",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-mgr",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-mgr-cephadm",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-mgr-dashboard",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-mgr-diskprediction-cloud",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-mgr-diskprediction-local",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-mgr-k8sevents",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-mgr-modules-core",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-mgr-rook",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-mon",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-osd",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-resource-agents",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "cephadm",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "cephfs-shell",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "libcephfs-java",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "libcephfs-jni",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "libcephfs2",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "librados2",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "libradosstriper1",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "librbd1",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "librgw2",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "python3-ceph",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "python3-ceph-argparse",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "python3-ceph-common",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "python3-cephfs",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "python3-rados",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "python3-rbd",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "python3-rgw",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "radosgw",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "rbd-fuse",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "rbd-mirror",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "rbd-nbd",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "ceph",
        "purl": "pkg:deb/ubuntu/ceph@15.2.17-0ubuntu0.20.04.3?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "15.2.17-0ubuntu0.20.04.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "14.2.2-0ubuntu3",
        "14.2.2-0ubuntu4",
        "14.2.4-0ubuntu1",
        "14.2.4-0ubuntu2",
        "14.2.4-0ubuntu3",
        "15.1.0-0ubuntu2",
        "15.1.0-0ubuntu3",
        "15.1.1-0ubuntu1",
        "15.2.0-0ubuntu1",
        "15.2.0-0ubuntu2",
        "15.2.1-0ubuntu1",
        "15.2.1-0ubuntu2",
        "15.2.3-0ubuntu0.20.04.1",
        "15.2.3-0ubuntu0.20.04.2",
        "15.2.5-0ubuntu0.20.04.1",
        "15.2.7-0ubuntu0.20.04.1",
        "15.2.7-0ubuntu0.20.04.2",
        "15.2.8-0ubuntu0.20.04.1",
        "15.2.11-0ubuntu0.20.04.2",
        "15.2.12-0ubuntu0.20.04.1",
        "15.2.13-0ubuntu0.20.04.1",
        "15.2.13-0ubuntu0.20.04.2",
        "15.2.14-0ubuntu0.20.04.1",
        "15.2.14-0ubuntu0.20.04.2",
        "15.2.16-0ubuntu0.20.04.1",
        "15.2.17-0ubuntu0.20.04.1"
      ]
    }
  ],
  "aliases": [],
  "details": "A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.",
  "id": "UBUNTU-CVE-2021-3979",
  "modified": "2026-04-22T07:39:50Z",
  "published": "2022-08-25T20:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-3979"
    },
    {
      "type": "REPORT",
      "url": "https://www.openwall.com/lists/oss-security/2022/01/11/5"
    },
    {
      "type": "REPORT",
      "url": "https://www.openwall.com/lists/oss-security/2022/01/12/5"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-6063-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-3979"
    }
  ],
  "related": [
    "USN-6063-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2021-3979"
  ]
}

CVE-2021-3979 (GCVE-0-2021-3979)

Vulnerability from cvelistv5 – Published: 2022-08-25 00:00 – Updated: 2025-11-03 18:08

Summary

Severity

No CVSS data available.

CWE

CWE-327 - - Use of a Broken or Risky Cryptographic Algorithm

Assigner

redhat

References

8 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=2024788
https://access.redhat.com/security/cve/CVE-2021-3979
https://tracker.ceph.com/issues/54006
https://github.com/ceph/ceph/pull/44765
https://github.com/ceph/ceph/commit/47c33179f9a15…
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.debian.org/debian-lts-announce/2023…
https://lists.debian.org/debian-lts-announce/2025…

Impacted products

1 product

Vendor	Product	Version
n/a	ceph	Affected: Not-Known

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T18:08:00.683Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2024788"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2021-3979"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://tracker.ceph.com/issues/54006"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/ceph/ceph/pull/44765"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/ceph/ceph/commit/47c33179f9a15ae95cc1579a421be89378602656"
          },
          {
            "name": "FEDORA-2022-d832fd2f45",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPOK44BESMIFW6BIOGCN452AKKOIIT6Q/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/09/msg00025.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "ceph",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Not-Known"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-327",
              "description": "CWE-327 - Use of a Broken or Risky Cryptographic Algorithm",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-23T18:06:28.690Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2024788"
        },
        {
          "url": "https://access.redhat.com/security/cve/CVE-2021-3979"
        },
        {
          "url": "https://tracker.ceph.com/issues/54006"
        },
        {
          "url": "https://github.com/ceph/ceph/pull/44765"
        },
        {
          "url": "https://github.com/ceph/ceph/commit/47c33179f9a15ae95cc1579a421be89378602656"
        },
        {
          "name": "FEDORA-2022-d832fd2f45",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPOK44BESMIFW6BIOGCN452AKKOIIT6Q/"
        },
        {
          "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2021-3979",
    "datePublished": "2022-08-25T00:00:00.000Z",
    "dateReserved": "2021-11-19T00:00:00.000Z",
    "dateUpdated": "2025-11-03T18:08:00.683Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

usn-6063-1

Vulnerability from osv_ubuntu

Published

2023-05-09 21:51

Modified

2026-04-22 07:37

Summary

ceph vulnerabilities

Details

Mark Kirkwood discovered that Ceph incorrectly handled certain key lengths. An attacker could possibly use this issue to create non-random encryption keys. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-3979)

It was discovered that Ceph incorrectly handled the volumes plugin. An attacker could possibly use this issue to obtain access to any share. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2022-0670)

It was discovered that Ceph incorrectly handled crash dumps. A local attacker could possibly use this issue to escalate privileges to root. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2022-3650)

It was discovered that Ceph incorrectly handled URL processing on RGW backends. An attacker could possibly use this issue to cause RGW to crash, leading to a denial of service. This issue only affected Ubuntu 22.04 LTS and Ubuntu 22.10. (CVE-2022-3854)

References

URL

Type

	https://ubuntu.com/security/notices/USN-6063-1	ADVISORY
	https://ubuntu.com/security/CVE-2021-3979	REPORT
	https://ubuntu.com/security/CVE-2022-0670	REPORT
	https://ubuntu.com/security/CVE-2022-3650	REPORT
	https://ubuntu.com/security/CVE-2022-3854	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2021-3979",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "ceph",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "ceph-base",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "ceph-common",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "ceph-fuse",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "ceph-mds",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "ceph-mgr",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "ceph-mon",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "ceph-osd",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "ceph-resource-agents",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "ceph-test",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "libcephfs-java",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "libcephfs-jni",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "libcephfs2",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "librados2",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "libradosstriper1",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "librbd1",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "librgw2",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "python-ceph",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "python-cephfs",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "python-rados",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "python-rbd",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "python-rgw",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "python3-ceph-argparse",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "python3-cephfs",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "python3-rados",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "python3-rbd",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "python3-rgw",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "radosgw",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "rbd-fuse",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "rbd-mirror",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          },
          {
            "binary_name": "rbd-nbd",
            "binary_version": "12.2.13-0ubuntu0.18.04.11"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "ceph",
        "purl": "pkg:deb/ubuntu/ceph@12.2.13-0ubuntu0.18.04.11?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "12.2.13-0ubuntu0.18.04.11"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "12.2.0-0ubuntu1",
        "12.2.1-0ubuntu1",
        "12.2.2-0ubuntu1",
        "12.2.2-0ubuntu2",
        "12.2.4-0ubuntu1",
        "12.2.4-0ubuntu1.1",
        "12.2.7-0ubuntu0.18.04.1",
        "12.2.8-0ubuntu0.18.04.1",
        "12.2.8-0ubuntu0.18.04.2",
        "12.2.11-0ubuntu0.18.04.1",
        "12.2.11-0ubuntu0.18.04.2",
        "12.2.12-0ubuntu0.18.04.1",
        "12.2.12-0ubuntu0.18.04.2",
        "12.2.12-0ubuntu0.18.04.3",
        "12.2.12-0ubuntu0.18.04.4",
        "12.2.12-0ubuntu0.18.04.5",
        "12.2.13-0ubuntu0.18.04.2",
        "12.2.13-0ubuntu0.18.04.3",
        "12.2.13-0ubuntu0.18.04.4",
        "12.2.13-0ubuntu0.18.04.5",
        "12.2.13-0ubuntu0.18.04.6",
        "12.2.13-0ubuntu0.18.04.7",
        "12.2.13-0ubuntu0.18.04.8",
        "12.2.13-0ubuntu0.18.04.10"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2021-3979",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-0670",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-3650",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:20.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "ceph",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-base",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-common",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-fuse",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-immutable-object-cache",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-mds",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-mgr",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-mgr-cephadm",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-mgr-dashboard",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-mgr-diskprediction-cloud",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-mgr-diskprediction-local",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-mgr-k8sevents",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-mgr-modules-core",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-mgr-rook",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-mon",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-osd",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "ceph-resource-agents",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "cephadm",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "cephfs-shell",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "libcephfs-java",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "libcephfs-jni",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "libcephfs2",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "librados2",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "libradosstriper1",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "librbd1",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "librgw2",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "python3-ceph",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "python3-ceph-argparse",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "python3-ceph-common",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "python3-cephfs",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "python3-rados",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "python3-rbd",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "python3-rgw",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "radosgw",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "rbd-fuse",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "rbd-mirror",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          },
          {
            "binary_name": "rbd-nbd",
            "binary_version": "15.2.17-0ubuntu0.20.04.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "ceph",
        "purl": "pkg:deb/ubuntu/ceph@15.2.17-0ubuntu0.20.04.3?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "15.2.17-0ubuntu0.20.04.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "14.2.2-0ubuntu3",
        "14.2.2-0ubuntu4",
        "14.2.4-0ubuntu1",
        "14.2.4-0ubuntu2",
        "14.2.4-0ubuntu3",
        "15.1.0-0ubuntu2",
        "15.1.0-0ubuntu3",
        "15.1.1-0ubuntu1",
        "15.2.0-0ubuntu1",
        "15.2.0-0ubuntu2",
        "15.2.1-0ubuntu1",
        "15.2.1-0ubuntu2",
        "15.2.3-0ubuntu0.20.04.1",
        "15.2.3-0ubuntu0.20.04.2",
        "15.2.5-0ubuntu0.20.04.1",
        "15.2.7-0ubuntu0.20.04.1",
        "15.2.7-0ubuntu0.20.04.2",
        "15.2.8-0ubuntu0.20.04.1",
        "15.2.11-0ubuntu0.20.04.2",
        "15.2.12-0ubuntu0.20.04.1",
        "15.2.13-0ubuntu0.20.04.1",
        "15.2.13-0ubuntu0.20.04.2",
        "15.2.14-0ubuntu0.20.04.1",
        "15.2.14-0ubuntu0.20.04.2",
        "15.2.16-0ubuntu0.20.04.1",
        "15.2.17-0ubuntu0.20.04.1"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2022-0670",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-3650",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-3854",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:22.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "ceph",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "ceph-base",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "ceph-common",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "ceph-fuse",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "ceph-grafana-dashboards",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "ceph-immutable-object-cache",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "ceph-mds",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "ceph-mgr",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "ceph-mgr-cephadm",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "ceph-mgr-dashboard",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "ceph-mgr-diskprediction-local",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "ceph-mgr-k8sevents",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "ceph-mgr-modules-core",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "ceph-mgr-rook",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "ceph-mon",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "ceph-osd",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "ceph-prometheus-alerts",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "ceph-resource-agents",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "ceph-volume",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "cephadm",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "cephfs-shell",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "crimson-osd",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "libcephfs-java",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "libcephfs-jni",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "libcephfs2",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "librados2",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "libradosstriper1",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "librbd1",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "librgw2",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "libsqlite3-mod-ceph",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "python3-ceph",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "python3-ceph-argparse",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "python3-ceph-common",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "python3-cephfs",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "python3-rados",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "python3-rbd",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "python3-rgw",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "radosgw",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "rbd-fuse",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "rbd-mirror",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          },
          {
            "binary_name": "rbd-nbd",
            "binary_version": "17.2.5-0ubuntu0.22.04.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "ceph",
        "purl": "pkg:deb/ubuntu/ceph@17.2.5-0ubuntu0.22.04.3?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "17.2.5-0ubuntu0.22.04.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "16.2.6-0ubuntu1",
        "16.2.6-0ubuntu2",
        "16.2.6-0ubuntu3",
        "16.2.7-0ubuntu1",
        "16.2.7-0ubuntu4",
        "17.1.0-0ubuntu1",
        "17.1.0-0ubuntu2",
        "17.1.0-0ubuntu3",
        "17.2.0-0ubuntu0.22.04.1",
        "17.2.0-0ubuntu0.22.04.2",
        "17.2.5-0ubuntu0.22.04.2"
      ]
    }
  ],
  "aliases": [],
  "details": "Mark Kirkwood discovered that Ceph incorrectly handled certain key lengths.\nAn attacker could possibly use this issue to create non-random encryption\nkeys. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.\n(CVE-2021-3979)\n\nIt was discovered that Ceph incorrectly handled the volumes plugin. An\nattacker could possibly use this issue to obtain access to any share. This\nissue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10.\n(CVE-2022-0670)\n\nIt was discovered that Ceph incorrectly handled crash dumps. A local\nattacker could possibly use this issue to escalate privileges to root. This\nissue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10.\n(CVE-2022-3650)\n\nIt was discovered that Ceph incorrectly handled URL processing on RGW\nbackends. An attacker could possibly use this issue to cause RGW to crash,\nleading to a denial of service. This issue only affected Ubuntu 22.04 LTS\nand Ubuntu 22.10. (CVE-2022-3854)\n",
  "id": "USN-6063-1",
  "modified": "2026-04-22T07:37:04Z",
  "published": "2023-05-09T21:51:19Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-6063-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-3979"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-0670"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-3650"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-3854"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "ceph vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2021-3979",
    "UBUNTU-CVE-2022-0670",
    "UBUNTU-CVE-2022-3650",
    "UBUNTU-CVE-2022-3854"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

ubuntu-cve-2021-3979

Vulnerability from osv_ubuntu

CVE-2021-3979 (GCVE-0-2021-3979)

usn-6063-1

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature