A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
|
History
21 Nov 2024, 06:23
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://access.redhat.com/security/cve/CVE-2021-3979 - Vendor Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2024788 - Issue Tracking, Vendor Advisory | |
| References | () https://github.com/ceph/ceph/commit/47c33179f9a15ae95cc1579a421be89378602656 - Patch, Third Party Advisory | |
| References | () https://github.com/ceph/ceph/pull/44765 - Patch, Third Party Advisory | |
| References | () https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html - | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPOK44BESMIFW6BIOGCN452AKKOIIT6Q/ - Mailing List | |
| References | () https://tracker.ceph.com/issues/54006 - Issue Tracking, Vendor Advisory |
23 Oct 2023, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
11 Jul 2023, 20:21
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-287 | |
| References | (MISC) https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPOK44BESMIFW6BIOGCN452AKKOIIT6Q/ - Mailing List |
Information
Published : 2022-08-25 20:15
Updated : 2024-11-21 06:23
NVD link : CVE-2021-3979
Mitre link : CVE-2021-3979
CVE.ORG link : CVE-2021-3979
JSON object : View
Products Affected
redhat
- ceph_storage_for_power
- ceph_storage
- openshift_data_foundation
- openshift_container_storage
- enterprise_linux
- openstack_platform
- ceph_storage_for_ibm_z_systems
fedoraproject
- fedora