A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
|
History
03 Nov 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
21 Nov 2024, 06:23
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://access.redhat.com/security/cve/CVE-2021-3979 - Vendor Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2024788 - Issue Tracking, Vendor Advisory | |
| References | () https://github.com/ceph/ceph/commit/47c33179f9a15ae95cc1579a421be89378602656 - Patch, Third Party Advisory | |
| References | () https://github.com/ceph/ceph/pull/44765 - Patch, Third Party Advisory | |
| References | () https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html - | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPOK44BESMIFW6BIOGCN452AKKOIIT6Q/ - Mailing List | |
| References | () https://tracker.ceph.com/issues/54006 - Issue Tracking, Vendor Advisory |
11 Jul 2023, 20:21
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| CWE | CWE-287 | |
| CPE | cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* |
31 Aug 2022, 14:42
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://tracker.ceph.com/issues/54006 - Issue Tracking, Vendor Advisory | |
| References | (MISC) https://access.redhat.com/security/cve/CVE-2021-3979 - Vendor Advisory | |
| References | (MISC) https://github.com/ceph/ceph/commit/47c33179f9a15ae95cc1579a421be89378602656 - Patch, Third Party Advisory | |
| References | (MISC) https://github.com/ceph/ceph/pull/44765 - Patch, Third Party Advisory | |
| References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2024788 - Issue Tracking, Vendor Advisory | |
| CPE | cpe:2.3:a:redhat:ceph_storage_for_power:4.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_data_foundation:4.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:openstack_platform:13.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:ceph_storage:5.1:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_container_storage:4.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:ceph_storage:5.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:ceph_storage_for_ibm_z_systems:4.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:ceph_storage:4.3:*:*:*:*:*:*:* cpe:2.3:a:redhat:ceph_storage:4.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:ceph_storage:3.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| CWE | CWE-327 |
25 Aug 2022, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-08-25 20:15
Updated : 2025-11-03 19:15
NVD link : CVE-2021-3979
Mitre link : CVE-2021-3979
CVE.ORG link : CVE-2021-3979
JSON object : View
Products Affected
redhat
- openshift_data_foundation
- ceph_storage_for_ibm_z_systems
- ceph_storage_for_power
- ceph_storage
- enterprise_linux
- openstack_platform
- openshift_container_storage
fedoraproject
- fedora