Medium
Security advisory
A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2018-1129
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:26 UTC · Revision 1
Source evidence
A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.
osv:CVE-2018-1129
Complete source record
{
"id": "ddbeac75a488e1a9a2da5197ddd8cfea26457f1ea38a0dde3845e6a6e42a3c17",
"url": "https://osv.dev/vulnerability/CVE-2018-1129",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2018-1129",
"summary": "A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable.",
"evidence": "osv:CVE-2018-1129",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2018-1129",
"aliases": [
"CVE-2018-1129"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/ceph/ceph",
"type": "GIT",
"events": [
{
"introduced": "1d0909a0ace0d739990e3555707f415e61096d9c"
},
{
"last_affected": "3c9db396aed1f773cbb3441dfb7a21f0b11ab3e1"
},
{
"fixed": "8f396cf35a3826044b089141667a196454c0a587"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:redhat:ceph_storage_mon:2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2"
},
{
"last_affected": "2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:redhat:ceph_storage_osd:2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2"
},
{
"last_affected": "2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:ceph:ceph:10.2.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "10.2.0"
},
{
"last_affected": "10.2.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:ceph:ceph:10.2.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "10.2.1"
},
{
"last_affected": "10.2.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:ceph:ceph:10.2.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "10.2.2"
},
{
"last_affected": "10.2.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:ceph:ceph:10.2.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "10.2.3"
},
{
"last_affected": "10.2.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:ceph:ceph:10.2.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "10.2.4"
},
{
"last_affected": "10.2.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:ceph:ceph:10.2.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "10.2.5"
},
{
"last_affected": "10.2.5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:ceph:ceph:10.2.6:*:*:*:*:*:*:*",
"range": [
{
"introduced": "10.2.6"
},
{
"last_affected": "10.2.6"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:ceph:ceph:10.2.7:*:*:*:*:*:*:*",
"range": [
{
"introduced": "10.2.7"
},
{
"last_affected": "10.2.7"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:ceph:ceph:10.2.8:*:*:*:*:*:*:*",
"range": [
{
"introduced": "10.2.8"
},
{
"last_affected": "10.2.8"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:ceph:ceph:10.2.9:*:*:*:*:*:*:*",
"range": [
{
"introduced": "10.2.9"
},
{
"last_affected": "10.2.9"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:ceph:ceph:10.2.10:*:*:*:*:*:*:*",
"range": [
{
"introduced": "10.2.10"
},
{
"last_affected": "10.2.10"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:ceph:ceph:10.2.11:*:*:*:*:*:*:*",
"range": [
{
"introduced": "10.2.11"
},
{
"last_affected": "10.2.11"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:ceph:ceph:12.2.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "12.2.0"
},
{
"last_affected": "12.2.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:ceph:ceph:12.2.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "12.2.1"
},
{
"last_affected": "12.2.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:ceph:ceph:12.2.2:*:*:*:*:*:*:*",
"range": [
{
"introduced": "12.2.2"
},
{
"last_affected": "12.2.2"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:ceph:ceph:12.2.3:*:*:*:*:*:*:*",
"range": [
{
"introduced": "12.2.3"
},
{
"last_affected": "12.2.3"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:ceph:ceph:12.2.4:*:*:*:*:*:*:*",
"range": [
{
"introduced": "12.2.4"
},
{
"last_affected": "12.2.4"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:ceph:ceph:12.2.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "12.2.5"
},
{
"last_affected": "12.2.5"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:ceph:ceph:12.2.6:*:*:*:*:*:*:*",
"range": [
{
"introduced": "12.2.6"
},
{
"last_affected": "12.2.6"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:ceph:ceph:12.2.7:*:*:*:*:*:*:*",
"range": [
{
"introduced": "12.2.7"
},
{
"last_affected": "12.2.7"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:ceph:ceph:13.2.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.2.0"
},
{
"last_affected": "13.2.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:ceph:ceph:13.2.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13.2.1"
},
{
"last_affected": "13.2.1"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "9.0"
},
{
"last_affected": "9.0"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "15.0"
},
{
"last_affected": "15.0"
}
],
"source": "CPE_STRING"
},
{
"range": [
{
"fixed": "8f396cf35a3826044b089141667a196454c0a587"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"10.2.0",
"10.2.1",
"10.2.10",
"10.2.11",
"10.2.2",
"10.2.3",
"10.2.4",
"10.2.5",
"10.2.6",
"10.2.7",
"10.2.8",
"10.2.9",
"12.2.0",
"12.2.1",
"12.2.2",
"12.2.3",
"12.2.4",
"12.2.5",
"12.2.6",
"12.2.7",
"13.2.0",
"13.2.1",
"15.0",
"2",
"9.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1129.json",
"vanir_signatures": [
{
"id": "CVE-2018-1129-692b6d65",
"digest": {
"threshold": 0.9,
"line_hashes": [
"101714054873615671449533678637528044464",
"204730747377763657306045922406037871061",
"184802433459791542385591813469305405696",
"194278290954202200063202169266421026999",
"285463715664107292597185474115337948286",
"224938655615217954667083534808567329747",
"323238405061339438124703828007163250784",
"14757801484515209770633037163635416171",
"299161139125190904871246778424746238226",
"303706062647846700364494057358149497993",
"138165059623664855551085062335377841829",
"68267178292800905880981098471657786013",
"259515854766984647381144657126725459037",
"55799125619598551732393041818857719598",
"173058415040374091877904087060601833097",
"270970690406432738190333471416352672776",
"324432494467839850124208327321842254472",
"81730675890199934822491768895838590587",
"220696923193420841983351434307727546251",
"229605938422456436814419580630024746619",
"168521888538563092444045135638220475818",
"114408788652185594976620226019750969539",
"72228878591817537367041508760725390316",
"274988142511309477226691216762725432855",
"100363914576226021838070188872572478717",
"166929772427402107687685460495313949298",
"180625950686284105336856111568935054618",
"106038062038205489926169328513547198569",
"34436572616374088243955802758804131473",
"171581963407818784950342056701526804311",
"247967641418735543141665557550669436266",
"165244961831484882699473163193719059976"
]
},
"source": "https://github.com/ceph/ceph/commit/8f396cf35a3826044b089141667a196454c0a587",
"target": {
"file": "src/auth/cephx/CephxSessionHandler.cc"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2018-1129-be39d2f8",
"digest": {
"length": 1302,
"function_hash": "31450864465716846747214712719381154708"
},
"source": "https://github.com/ceph/ceph/commit/8f396cf35a3826044b089141667a196454c0a587",
"target": {
"file": "src/auth/cephx/CephxSessionHandler.cc",
"function": "CephxSessionHandler::_calc_signature"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T13:33:00Z"
}
}
],
"modified": "2026-10-20T13:33:00.542614361Z",
"provider": "osv",
"references": [
"https://access.redhat.com/errata/RHSA-2018:2177",
"https://access.redhat.com/errata/RHSA-2018:2179",
"https://access.redhat.com/errata/RHSA-2018:2261",
"https://access.redhat.com/errata/RHSA-2018:2274",
"https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html",
"https://www.debian.org/security/2018/dsa-4339",
"https://bugzilla.redhat.com/show_bug.cgi?id=1576057",
"https://github.com/ceph/ceph/commit/8f396cf35a3826044b089141667a196454c0a587"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:redhat:ceph_storage:1.3:*:*:*:*:*:*:*",
"cpe:2.3:a:redhat:ceph_storage:3:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:ceph_storage",
"extracted_events": [
{
"range": [
{
"introduced": "1.3"
},
{
"last_affected": "1.3"
},
{
"introduced": "3"
},
{
"last_affected": "3"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:redhat:ceph_storage_mon:3:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:ceph_storage_mon",
"extracted_events": [
{
"range": [
{
"introduced": "3"
},
{
"last_affected": "3"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:redhat:ceph_storage_osd:3:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:ceph_storage_osd",
"extracted_events": [
{
"range": [
{
"introduced": "3"
},
{
"last_affected": "3"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_desktop",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_workstation",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2018-1129",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 387828,
"published_at": "2018-07-10T14:29:00.417+00:00"
}