Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [day] [month] [year] [list]
Date: Tue, 7 Apr 2020 12:04:59 +0530
From: Hardik Vyas <>
Subject: CVE-2020-1759 ceph: secure mode of msgr2 breaks both confidentiality
 and integrity aspects for long-lived sessions


A nonce reuse vulnerability was discovered in the secure mode of the
messenger v2 protocol, which can allow an
attacker to forge auth tags and potentially manipulate the data by
leveraging the reuse of a nonce in a session.
Messages encrypted using a reused nonce value are susceptible to serious
confidentiality and integrity attacks.

This flaw was introduced in commit fe387e02b11d ("msg/async, v2: drop
depedency on uint128_t. Clean up onwire
crypto.") and affects all the ceph versions from v14.1.1. Red Hat has
assigned CVE-2020-1759 for this issue.

Upstream Patches:

Credit: Ilya Dryomov (Red Hat)

PS: The patches are currently available from ceph.git clone(ceph-ci) and
will be pushed to active releases soon.


Hardik Vyas / Red Hat Product Security

BD48 C633 DE34 733A BBC3  3B72 8A14 AEBB D68B 9381

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.