Ceph is a distributed object, block, and file storage platform. In versions 17.2.7, 18.2.1 through 18.2.4, and 19.0.0 through 19.2.2, an unprivileged user can escalate to root privileges in a ceph-fuse mounted CephFS by chmod 777 a directory owned by root to gain access. The result of this is that a user could read, write and execute to any directory owned by root as long as they chmod 777 it. This impacts confidentiality, integrity, and availability. It is patched in versions 17.2.8, 18.2.5, and 19.2.3.
{
"binaries": [
{
"binary_version": "0.80.11-0ubuntu1.14.04.4+esm3",
"binary_name": "ceph"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.4+esm3",
"binary_name": "ceph-common"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.4+esm3",
"binary_name": "ceph-fs-common"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.4+esm3",
"binary_name": "ceph-fuse"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.4+esm3",
"binary_name": "ceph-mds"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.4+esm3",
"binary_name": "ceph-resource-agents"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.4+esm3",
"binary_name": "ceph-test"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.4+esm3",
"binary_name": "libcephfs-dev"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.4+esm3",
"binary_name": "libcephfs-java"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.4+esm3",
"binary_name": "libcephfs-jni"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.4+esm3",
"binary_name": "libcephfs1"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.4+esm3",
"binary_name": "librados-dev"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.4+esm3",
"binary_name": "librados2"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.4+esm3",
"binary_name": "librbd-dev"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.4+esm3",
"binary_name": "librbd1"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.4+esm3",
"binary_name": "python-ceph"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.4+esm3",
"binary_name": "radosgw"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.4+esm3",
"binary_name": "rbd-fuse"
},
{
"binary_version": "0.80.11-0ubuntu1.14.04.4+esm3",
"binary_name": "rest-bench"
}
]
}
{
"binaries": [
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "ceph"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "ceph-common"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "ceph-fs-common"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "ceph-fuse"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "ceph-mds"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "ceph-resource-agents"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "ceph-test"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "libcephfs-dev"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "libcephfs-java"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "libcephfs-jni"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "libcephfs1"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "librados-dev"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "librados2"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "libradosstriper-dev"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "libradosstriper1"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "librbd-dev"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "librbd1"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "librgw-dev"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "librgw2"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "python-ceph"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "python-cephfs"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "python-rados"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "python-rbd"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "radosgw"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "rbd-fuse"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "rbd-mirror"
},
{
"binary_version": "10.2.11-0ubuntu0.16.04.3+esm2",
"binary_name": "rbd-nbd"
}
]
}
{
"binaries": [
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "ceph"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "ceph-base"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "ceph-common"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "ceph-fuse"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "ceph-mds"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "ceph-mgr"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "ceph-mon"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "ceph-osd"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "ceph-resource-agents"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "ceph-test"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "libcephfs-dev"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "libcephfs-java"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "libcephfs-jni"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "libcephfs2"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "librados-dev"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "librados2"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "libradosstriper-dev"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "libradosstriper1"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "librbd-dev"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "librbd1"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "librgw-dev"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "librgw2"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "python-ceph"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "python-cephfs"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "python-rados"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "python-rbd"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "python-rgw"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "python3-ceph-argparse"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "python3-cephfs"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "python3-rados"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "python3-rbd"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "python3-rgw"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "rados-objclass-dev"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "radosgw"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "rbd-fuse"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "rbd-mirror"
},
{
"binary_version": "12.2.13-0ubuntu0.18.04.11+esm1",
"binary_name": "rbd-nbd"
}
]
}
{
"binaries": [
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "ceph"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "ceph-base"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "ceph-common"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "ceph-fuse"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "ceph-immutable-object-cache"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "ceph-mds"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "ceph-mgr"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "ceph-mgr-cephadm"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "ceph-mgr-dashboard"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "ceph-mgr-diskprediction-cloud"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "ceph-mgr-diskprediction-local"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "ceph-mgr-k8sevents"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "ceph-mgr-modules-core"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "ceph-mgr-rook"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "ceph-mon"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "ceph-osd"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "ceph-resource-agents"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "cephadm"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "cephfs-shell"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "libcephfs-dev"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "libcephfs-java"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "libcephfs-jni"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "libcephfs2"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "librados-dev"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "librados2"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "libradospp-dev"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "libradosstriper-dev"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "libradosstriper1"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "librbd-dev"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "librbd1"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "librgw-dev"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "librgw2"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "python3-ceph"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "python3-ceph-argparse"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "python3-ceph-common"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "python3-cephfs"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "python3-rados"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "python3-rbd"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "python3-rgw"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "rados-objclass-dev"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "radosgw"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "rbd-fuse"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "rbd-mirror"
},
{
"binary_version": "15.2.17-0ubuntu0.20.04.6",
"binary_name": "rbd-nbd"
}
]
}