Date: Tue, 7 Apr 2020 12:04:59 +0530 From: Hardik Vyas <hvyas@...hat.com> To: oss-security@...ts.openwall.com Subject: CVE-2020-1759 ceph: secure mode of msgr2 breaks both confidentiality and integrity aspects for long-lived sessions Hello, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the reuse of a nonce in a session. Messages encrypted using a reused nonce value are susceptible to serious confidentiality and integrity attacks. This flaw was introduced in commit fe387e02b11d ("msg/async, v2: drop depedency on uint128_t. Clean up onwire crypto.") and affects all the ceph versions from v14.1.1. Red Hat has assigned CVE-2020-1759 for this issue. Upstream Patches: https://github.com/ceph/ceph-ci/commit/84d2e215969cde830b086d11544aeb3666614211 https://github.com/ceph/ceph-ci/commit/659ec7dc6e30fe961832f813da007f49e603a33d Credit: Ilya Dryomov (Red Hat) PS: The patches are currently available from ceph.git clone(ceph-ci) and will be pushed to active releases soon. Regards, -- Hardik Vyas / Red Hat Product Security BD48 C633 DE34 733A BBC3 3B72 8A14 AEBB D68B 9381
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.