Skip to content
Heist/ feed
HighFix available

UBUNTU-CVE-2021-20288

Type: advisorySource: OSV1 source record

An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles CEPHX_GET_AUTH_SESSION_KEY requests, it doesn't sanitize other_keys, allowing key reuse. An attacker who can request a global_id can exploit the ability of any user to request a global_id previously associated with another user, as ceph does not force the reuse of old keys to generate new ones. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Announced Group revision 1
Original source ↗

UBUNTU-CVE-2021-20288

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:UBUNTU-CVE-2021-20288

ceph

Source reference: /affected/0/package/name

Affected versions
0.67.4-0ubuntu2

Source reference: /affected/0/versions

0.67.4-0ubuntu3

Source reference: /affected/0/versions

0.72-0ubuntu1

Source reference: /affected/0/versions

0.72.1-0ubuntu1

Source reference: /affected/0/versions

0.72.1-2

Source reference: /affected/0/versions

0.72.1-3

Source reference: /affected/0/versions

0.72.2-1

Source reference: /affected/0/versions

0.72.2-2

Source reference: /affected/0/versions

0.78-0ubuntu1

Source reference: /affected/0/versions

0.79-0ubuntu1

Source reference: /affected/0/versions

0.80.1-0ubuntu1

Source reference: /affected/0/versions

0.80.1-0ubuntu1.1

Source reference: /affected/0/versions

0.80.5-0ubuntu0.14.04.1

Source reference: /affected/0/versions

0.80.7-0ubuntu0.14.04.1

Source reference: /affected/0/versions

0.80.9-0ubuntu0.14.04.1

Source reference: /affected/0/versions

0.80.9-0ubuntu0.14.04.2

Source reference: /affected/0/versions

0.80.10-0ubuntu0.14.04.1

Source reference: /affected/0/versions

0.80.10-0ubuntu1.14.04.2

Source reference: /affected/0/versions

0.80.10-0ubuntu1.14.04.3

Source reference: /affected/0/versions

0.80.11-0ubuntu1.14.04.1

Source reference: /affected/0/versions

0.80.11-0ubuntu1.14.04.2

Source reference: /affected/0/versions

0.80.11-0ubuntu1.14.04.3

Source reference: /affected/0/versions

0.80.11-0ubuntu1.14.04.4

Source reference: /affected/0/versions

0.80.11-0ubuntu1.14.04.4+esm2

Source reference: /affected/0/versions

0.80.11-0ubuntu1.14.04.4+esm3

Source reference: /affected/0/versions

0.80.11-0ubuntu1.14.04.4+esm4

Source reference: /affected/0/versions

Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

ceph

Source reference: /affected/1/package/name

Affected versions
0.94.3-0ubuntu2

Source reference: /affected/1/versions

0.94.5-0ubuntu1

Source reference: /affected/1/versions

9.2.0-0ubuntu3

Source reference: /affected/1/versions

9.2.0-0ubuntu4

Source reference: /affected/1/versions

9.2.0-0ubuntu5

Source reference: /affected/1/versions

9.2.0-0ubuntu6

Source reference: /affected/1/versions

10.0.2-0ubuntu1

Source reference: /affected/1/versions

10.0.3-0ubuntu1

Source reference: /affected/1/versions

10.0.5-0ubuntu1

Source reference: /affected/1/versions

10.1.0-0ubuntu1

Source reference: /affected/1/versions

10.1.1-0ubuntu1

Source reference: /affected/1/versions

10.1.2-0ubuntu1

Source reference: /affected/1/versions

10.2.0-0ubuntu0.16.04.1

Source reference: /affected/1/versions

10.2.0-0ubuntu0.16.04.2

Source reference: /affected/1/versions

10.2.2-0ubuntu0.16.04.2

Source reference: /affected/1/versions

10.2.3-0ubuntu0.16.04.2

Source reference: /affected/1/versions

10.2.5-0ubuntu0.16.04.1

Source reference: /affected/1/versions

10.2.6-0ubuntu0.16.04.1

Source reference: /affected/1/versions

10.2.7-0ubuntu0.16.04.1

Source reference: /affected/1/versions

10.2.9-0ubuntu0.16.04.1

Source reference: /affected/1/versions

10.2.10-0ubuntu0.16.04.1

Source reference: /affected/1/versions

10.2.11-0ubuntu0.16.04.1

Source reference: /affected/1/versions

10.2.11-0ubuntu0.16.04.2

Source reference: /affected/1/versions

10.2.11-0ubuntu0.16.04.3

Source reference: /affected/1/versions

10.2.11-0ubuntu0.16.04.3+esm1

Source reference: /affected/1/versions

10.2.11-0ubuntu0.16.04.3+esm2

Source reference: /affected/1/versions

10.2.11-0ubuntu0.16.04.3+esm3

Source reference: /affected/1/versions

Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

ceph

Source reference: /affected/2/package/name

Affected versions
12.2.0-0ubuntu1

Source reference: /affected/2/versions

12.2.1-0ubuntu1

Source reference: /affected/2/versions

12.2.2-0ubuntu1

Source reference: /affected/2/versions

12.2.2-0ubuntu2

Source reference: /affected/2/versions

12.2.4-0ubuntu1

Source reference: /affected/2/versions

12.2.4-0ubuntu1.1

Source reference: /affected/2/versions

12.2.7-0ubuntu0.18.04.1

Source reference: /affected/2/versions

12.2.8-0ubuntu0.18.04.1

Source reference: /affected/2/versions

12.2.8-0ubuntu0.18.04.2

Source reference: /affected/2/versions

12.2.11-0ubuntu0.18.04.1

Source reference: /affected/2/versions

12.2.11-0ubuntu0.18.04.2

Source reference: /affected/2/versions

12.2.12-0ubuntu0.18.04.1

Source reference: /affected/2/versions

12.2.12-0ubuntu0.18.04.2

Source reference: /affected/2/versions

12.2.12-0ubuntu0.18.04.3

Source reference: /affected/2/versions

12.2.12-0ubuntu0.18.04.4

Source reference: /affected/2/versions

12.2.12-0ubuntu0.18.04.5

Source reference: /affected/2/versions

12.2.13-0ubuntu0.18.04.2

Source reference: /affected/2/versions

12.2.13-0ubuntu0.18.04.3

Source reference: /affected/2/versions

12.2.13-0ubuntu0.18.04.4

Source reference: /affected/2/versions

12.2.13-0ubuntu0.18.04.5

Source reference: /affected/2/versions

12.2.13-0ubuntu0.18.04.6

Source reference: /affected/2/versions

12.2.13-0ubuntu0.18.04.7

Source reference: /affected/2/versions

12.2.13-0ubuntu0.18.04.8

Source reference: /affected/2/versions

12.2.13-0ubuntu0.18.04.10

Source reference: /affected/2/versions

12.2.13-0ubuntu0.18.04.11

Source reference: /affected/2/versions

12.2.13-0ubuntu0.18.04.11+esm1

Source reference: /affected/2/versions

12.2.13-0ubuntu0.18.04.11+esm2

Source reference: /affected/2/versions

12.2.13-0ubuntu0.18.04.11+esm3

Source reference: /affected/2/versions

Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

ceph

Source reference: /affected/3/package/name

Affected versions
14.2.2-0ubuntu3

Source reference: /affected/3/versions

14.2.2-0ubuntu4

Source reference: /affected/3/versions

14.2.4-0ubuntu1

Source reference: /affected/3/versions

14.2.4-0ubuntu2

Source reference: /affected/3/versions

14.2.4-0ubuntu3

Source reference: /affected/3/versions

15.1.0-0ubuntu2

Source reference: /affected/3/versions

15.1.0-0ubuntu3

Source reference: /affected/3/versions

15.1.1-0ubuntu1

Source reference: /affected/3/versions

15.2.0-0ubuntu1

Source reference: /affected/3/versions

15.2.0-0ubuntu2

Source reference: /affected/3/versions

15.2.1-0ubuntu1

Source reference: /affected/3/versions

15.2.1-0ubuntu2

Source reference: /affected/3/versions

15.2.3-0ubuntu0.20.04.1

Source reference: /affected/3/versions

15.2.3-0ubuntu0.20.04.2

Source reference: /affected/3/versions

15.2.5-0ubuntu0.20.04.1

Source reference: /affected/3/versions

15.2.7-0ubuntu0.20.04.1

Source reference: /affected/3/versions

15.2.7-0ubuntu0.20.04.2

Source reference: /affected/3/versions

15.2.8-0ubuntu0.20.04.1

Source reference: /affected/3/versions

15.2.11-0ubuntu0.20.04.2

Source reference: /affected/3/versions

Fixed versions
15.2.12-0ubuntu0.20.04.1

Source reference: /affected/3/ranges

Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "ceph",
      "purl": "pkg:deb/ubuntu/ceph?arch=source&distro=esm-infra-legacy%2Ftrusty",
      "ecosystem": "Ubuntu:Pro:14.04:LTS"
    },
    "versions": [
      "0.67.4-0ubuntu2",
      "0.67.4-0ubuntu3",
      "0.72-0ubuntu1",
      "0.72.1-0ubuntu1",
      "0.72.1-2",
      "0.72.1-3",
      "0.72.2-1",
      "0.72.2-2",
      "0.78-0ubuntu1",
      "0.79-0ubuntu1",
      "0.80.1-0ubuntu1",
      "0.80.1-0ubuntu1.1",
      "0.80.5-0ubuntu0.14.04.1",
      "0.80.7-0ubuntu0.14.04.1",
      "0.80.9-0ubuntu0.14.04.1",
      "0.80.9-0ubuntu0.14.04.2",
      "0.80.10-0ubuntu0.14.04.1",
      "0.80.10-0ubuntu1.14.04.2",
      "0.80.10-0ubuntu1.14.04.3",
      "0.80.11-0ubuntu1.14.04.1",
      "0.80.11-0ubuntu1.14.04.2",
      "0.80.11-0ubuntu1.14.04.3",
      "0.80.11-0ubuntu1.14.04.4",
      "0.80.11-0ubuntu1.14.04.4+esm2",
      "0.80.11-0ubuntu1.14.04.4+esm3",
      "0.80.11-0ubuntu1.14.04.4+esm4"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-20288.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "ceph",
          "binary_version": "0.80.11-0ubuntu1.14.04.4+esm4"
        },
        {
          "binary_name": "ceph-common",
          "binary_version": "0.80.11-0ubuntu1.14.04.4+esm4"
        },
        {
          "binary_name": "ceph-fs-common",
          "binary_version": "0.80.11-0ubuntu1.14.04.4+esm4"
        },
        {
          "binary_name": "ceph-fuse",
          "binary_version": "0.80.11-0ubuntu1.14.04.4+esm4"
        },
        {
          "binary_name": "ceph-mds",
          "binary_version": "0.80.11-0ubuntu1.14.04.4+esm4"
        },
        {
          "binary_name": "ceph-resource-agents",
          "binary_version": "0.80.11-0ubuntu1.14.04.4+esm4"
        },
        {
          "binary_name": "ceph-test",
          "binary_version": "0.80.11-0ubuntu1.14.04.4+esm4"
        },
        {
          "binary_name": "libcephfs-java",
          "binary_version": "0.80.11-0ubuntu1.14.04.4+esm4"
        },
        {
          "binary_name": "libcephfs-jni",
          "binary_version": "0.80.11-0ubuntu1.14.04.4+esm4"
        },
        {
          "binary_name": "libcephfs1",
          "binary_version": "0.80.11-0ubuntu1.14.04.4+esm4"
        },
        {
          "binary_name": "librados2",
          "binary_version": "0.80.11-0ubuntu1.14.04.4+esm4"
        },
        {
          "binary_name": "librbd1",
          "binary_version": "0.80.11-0ubuntu1.14.04.4+esm4"
        },
        {
          "binary_name": "python-ceph",
          "binary_version": "0.80.11-0ubuntu1.14.04.4+esm4"
        },
        {
          "binary_name": "radosgw",
          "binary_version": "0.80.11-0ubuntu1.14.04.4+esm4"
        },
        {
          "binary_name": "rbd-fuse",
          "binary_version": "0.80.11-0ubuntu1.14.04.4+esm4"
        },
        {
          "binary_name": "rest-bench",
          "binary_version": "0.80.11-0ubuntu1.14.04.4+esm4"
        }
      ]
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "ceph",
      "purl": "pkg:deb/ubuntu/ceph?arch=source&distro=esm-infra%2Fxenial",
      "ecosystem": "Ubuntu:Pro:16.04:LTS"
    },
    "versions": [
      "0.94.3-0ubuntu2",
      "0.94.5-0ubuntu1",
      "9.2.0-0ubuntu3",
      "9.2.0-0ubuntu4",
      "9.2.0-0ubuntu5",
      "9.2.0-0ubuntu6",
      "10.0.2-0ubuntu1",
      "10.0.3-0ubuntu1",
      "10.0.5-0ubuntu1",
      "10.1.0-0ubuntu1",
      "10.1.1-0ubuntu1",
      "10.1.2-0ubuntu1",
      "10.2.0-0ubuntu0.16.04.1",
      "10.2.0-0ubuntu0.16.04.2",
      "10.2.2-0ubuntu0.16.04.2",
      "10.2.3-0ubuntu0.16.04.2",
      "10.2.5-0ubuntu0.16.04.1",
      "10.2.6-0ubuntu0.16.04.1",
      "10.2.7-0ubuntu0.16.04.1",
      "10.2.9-0ubuntu0.16.04.1",
      "10.2.10-0ubuntu0.16.04.1",
      "10.2.11-0ubuntu0.16.04.1",
      "10.2.11-0ubuntu0.16.04.2",
      "10.2.11-0ubuntu0.16.04.3",
      "10.2.11-0ubuntu0.16.04.3+esm1",
      "10.2.11-0ubuntu0.16.04.3+esm2",
      "10.2.11-0ubuntu0.16.04.3+esm3"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-20288.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "ceph",
          "binary_version": "10.2.11-0ubuntu0.16.04.3+esm3"
        },
        {
          "binary_name": "ceph-common",
          "binary_version": "10.2.11-0ubuntu0.16.04.3+esm3"
        },
        {
          "binary_name": "ceph-fs-common",
          "binary_version": "10.2.11-0ubuntu0.16.04.3+esm3"
        },
        {
          "binary_name": "ceph-fuse",
          "binary_version": "10.2.11-0ubuntu0.16.04.3+esm3"
        },
        {
          "binary_name": "ceph-mds",
          "binary_version": "10.2.11-0ubuntu0.16.04.3+esm3"
        },
        {
          "binary_name": "ceph-resource-agents",
          "binary_version": "10.2.11-0ubuntu0.16.04.3+esm3"
        },
        {
          "binary_name": "ceph-test",
          "binary_version": "10.2.11-0ubuntu0.16.04.3+esm3"
        },
        {
          "binary_name": "libcephfs-java",
          "binary_version": "10.2.11-0ubuntu0.16.04.3+esm3"
        },
        {
          "binary_name": "libcephfs-jni",
          "binary_version": "10.2.11-0ubuntu0.16.04.3+esm3"
        },
        {
          "binary_name": "libcephfs1",
          "binary_version": "10.2.11-0ubuntu0.16.04.3+esm3"
        },
        {
          "binary_name": "librados2",
          "binary_version": "10.2.11-0ubuntu0.16.04.3+esm3"
        },
        {
          "binary_name": "libradosstriper1",
          "binary_version": "10.2.11-0ubuntu0.16.04.3+esm3"
        },
        {
          "binary_name": "librbd1",
          "binary_version": "10.2.11-0ubuntu0.16.04.3+esm3"
        },
        {
          "binary_name": "librgw2",
          "binary_version": "10.2.11-0ubuntu0.16.04.3+esm3"
        },
        {
          "binary_name": "python-ceph",
          "binary_version": "10.2.11-0ubuntu0.16.04.3+esm3"
        },
        {
          "binary_name": "python-cephfs",
          "binary_version": "10.2.11-0ubuntu0.16.04.3+esm3"
        },
        {
          "binary_name": "python-rados",
          "binary_version": "10.2.11-0ubuntu0.16.04.3+esm3"
        },
        {
          "binary_name": "python-rbd",
          "binary_version": "10.2.11-0ubuntu0.16.04.3+esm3"
        },
        {
          "binary_name": "radosgw",
          "binary_version": "10.2.11-0ubuntu0.16.04.3+esm3"
        },
        {
          "binary_name": "rbd-fuse",
          "binary_version": "10.2.11-0ubuntu0.16.04.3+esm3"
        },
        {
          "binary_name": "rbd-mirror",
          "binary_version": "10.2.11-0ubuntu0.16.04.3+esm3"
        },
        {
          "binary_name": "rbd-nbd",
          "binary_version": "10.2.11-0ubuntu0.16.04.3+esm3"
        }
      ]
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "ceph",
      "purl": "pkg:deb/ubuntu/ceph?arch=source&distro=esm-infra%2Fbionic",
      "ecosystem": "Ubuntu:Pro:18.04:LTS"
    },
    "versions": [
      "12.2.0-0ubuntu1",
      "12.2.1-0ubuntu1",
      "12.2.2-0ubuntu1",
      "12.2.2-0ubuntu2",
      "12.2.4-0ubuntu1",
      "12.2.4-0ubuntu1.1",
      "12.2.7-0ubuntu0.18.04.1",
      "12.2.8-0ubuntu0.18.04.1",
      "12.2.8-0ubuntu0.18.04.2",
      "12.2.11-0ubuntu0.18.04.1",
      "12.2.11-0ubuntu0.18.04.2",
      "12.2.12-0ubuntu0.18.04.1",
      "12.2.12-0ubuntu0.18.04.2",
      "12.2.12-0ubuntu0.18.04.3",
      "12.2.12-0ubuntu0.18.04.4",
      "12.2.12-0ubuntu0.18.04.5",
      "12.2.13-0ubuntu0.18.04.2",
      "12.2.13-0ubuntu0.18.04.3",
      "12.2.13-0ubuntu0.18.04.4",
      "12.2.13-0ubuntu0.18.04.5",
      "12.2.13-0ubuntu0.18.04.6",
      "12.2.13-0ubuntu0.18.04.7",
      "12.2.13-0ubuntu0.18.04.8",
      "12.2.13-0ubuntu0.18.04.10",
      "12.2.13-0ubuntu0.18.04.11",
      "12.2.13-0ubuntu0.18.04.11+esm1",
      "12.2.13-0ubuntu0.18.04.11+esm2",
      "12.2.13-0ubuntu0.18.04.11+esm3"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-20288.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "ceph",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "ceph-base",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "ceph-common",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "ceph-fuse",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "ceph-mds",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "ceph-mgr",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "ceph-mon",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "ceph-osd",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "ceph-resource-agents",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "ceph-test",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "libcephfs-java",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "libcephfs-jni",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "libcephfs2",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "librados2",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "libradosstriper1",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "librbd1",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "librgw2",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "python-ceph",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "python-cephfs",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "python-rados",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "python-rbd",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "python-rgw",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "python3-ceph-argparse",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "python3-cephfs",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "python3-rados",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "python3-rbd",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "python3-rgw",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "radosgw",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "rbd-fuse",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "rbd-mirror",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        },
        {
          "binary_name": "rbd-nbd",
          "binary_version": "12.2.13-0ubuntu0.18.04.11+esm3"
        }
      ]
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "15.2.12-0ubuntu0.20.04.1"
          }
        ]
      }
    ],
    "package": {
      "name": "ceph",
      "purl": "pkg:deb/ubuntu/ceph?arch=source&distro=focal",
      "ecosystem": "Ubuntu:20.04:LTS"
    },
    "versions": [
      "14.2.2-0ubuntu3",
      "14.2.2-0ubuntu4",
      "14.2.4-0ubuntu1",
      "14.2.4-0ubuntu2",
      "14.2.4-0ubuntu3",
      "15.1.0-0ubuntu2",
      "15.1.0-0ubuntu3",
      "15.1.1-0ubuntu1",
      "15.2.0-0ubuntu1",
      "15.2.0-0ubuntu2",
      "15.2.1-0ubuntu1",
      "15.2.1-0ubuntu2",
      "15.2.3-0ubuntu0.20.04.1",
      "15.2.3-0ubuntu0.20.04.2",
      "15.2.5-0ubuntu0.20.04.1",
      "15.2.7-0ubuntu0.20.04.1",
      "15.2.7-0ubuntu0.20.04.2",
      "15.2.8-0ubuntu0.20.04.1",
      "15.2.11-0ubuntu0.20.04.2"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-20288.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "ceph",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "ceph-base",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "ceph-common",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "ceph-fuse",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "ceph-immutable-object-cache",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "ceph-mds",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "ceph-mgr",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "ceph-mgr-cephadm",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "ceph-mgr-dashboard",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "ceph-mgr-diskprediction-cloud",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "ceph-mgr-diskprediction-local",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "ceph-mgr-k8sevents",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "ceph-mgr-modules-core",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "ceph-mgr-rook",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "ceph-mon",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "ceph-osd",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "ceph-resource-agents",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "cephadm",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "cephfs-shell",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "libcephfs-java",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "libcephfs-jni",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "libcephfs2",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "librados2",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "libradosstriper1",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "librbd1",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "librgw2",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "python3-ceph",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "python3-ceph-argparse",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "python3-ceph-common",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "python3-cephfs",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "python3-rados",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "python3-rbd",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "python3-rgw",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "radosgw",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "rbd-fuse",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "rbd-mirror",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        },
        {
          "binary_name": "rbd-nbd",
          "binary_version": "15.2.12-0ubuntu0.20.04.1"
        }
      ],
      "availability": "No subscription required"
    }
  }
]
Related CVEs
CVE-2021-20288

Source reference: /upstream

Publisher severity

high

Source reference: /severity/0/score

Event
#83947 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement