Lucene search

K

RedhatCVELIST:CVE-2021-3979

HistoryAug 25, 2022 - 12:00 a.m.

CVE-2021-3979

2022-08-2500:00:00

CWE-327

redhat

www.cve.org

2

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.8%

A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "ceph",
    "versions": [
      {
        "version": "Not-Known",
        "status": "affected"
      }
    ]
  }
]

References

access.redhat.com/security/cve/CVE-2021-3979

bugzilla.redhat.com/show_bug.cgi?id=2024788

github.com/ceph/ceph/commit/47c33179f9a15ae95cc1579a421be89378602656

github.com/ceph/ceph/pull/44765

lists.debian.org/debian-lts-announce/2023/10/msg00034.html

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPOK44BESMIFW6BIOGCN452AKKOIIT6Q/

tracker.ceph.com/issues/54006

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.8%

Related for CVELIST:CVE-2021-3979

openvas8 suse1 ubuntucve1 nessus7 fedora1 redhatcve1 nvd1 cve1 veracode1 prion1 osv3 debiancve1 mageia1 redhat2 ubuntu1 debian1