[<prev] [next>] [day] [month] [year] [list]
Message-ID: <CAOo2v=CeSZ3h9ui1Fr=nfZqFOM1h7zdZQfhwFr58DAqzQQ=WhA@mail.gmail.com>
Date: Tue, 7 Apr 2020 12:04:59 +0530
From: Hardik Vyas <hvyas@...hat.com>
To: oss-security@...ts.openwall.com
Subject: CVE-2020-1759 ceph: secure mode of msgr2 breaks both confidentiality
and integrity aspects for long-lived sessions
Hello,
A nonce reuse vulnerability was discovered in the secure mode of the
messenger v2 protocol, which can allow an
attacker to forge auth tags and potentially manipulate the data by
leveraging the reuse of a nonce in a session.
Messages encrypted using a reused nonce value are susceptible to serious
confidentiality and integrity attacks.
This flaw was introduced in commit fe387e02b11d ("msg/async, v2: drop
depedency on uint128_t. Clean up onwire
crypto.") and affects all the ceph versions from v14.1.1. Red Hat has
assigned CVE-2020-1759 for this issue.
Upstream Patches:
https://github.com/ceph/ceph-ci/commit/84d2e215969cde830b086d11544aeb3666614211
https://github.com/ceph/ceph-ci/commit/659ec7dc6e30fe961832f813da007f49e603a33d
Credit: Ilya Dryomov (Red Hat)
PS: The patches are currently available from ceph.git clone(ceph-ci) and
will be pushed to active releases soon.
Regards,
--
Hardik Vyas / Red Hat Product Security
BD48 C633 DE34 733A BBC3 3B72 8A14 AEBB D68B 9381
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
