CVE-2021-3979

Katalog CVE

CVSS 6.5 · Medium EPSS 0,56%

Kerentanan Use of a Broken or Risky Cryptographic Algorithm pada redhat ceph storage, redhat openshift container storage +5 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to create a non random key, which is weaker and can be exploited for loss of confidentiality and integrity on encrypted disks.

Rincian

Terbit di NVD

25 Agustus 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-327: Use of a Broken or Risky Cryptographic Algorithm
CWE-287: Improper Authentication

EPSS (30 hari)

0,56% peluang dieksploitasi; lebih tinggi dari 45,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2021-3979 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2024788 issue tracking · advisory vendor
• https://tracker.ceph.com/issues/54006 issue tracking · advisory vendor
• https://github.com/ceph/ceph/commit/47c33179f9a15ae95cc1579a421be89378602656 patch · advisory pihak ketiga
• https://github.com/ceph/ceph/pull/44765 patch · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPOK44BESMIFW... mailing list
• https://lists.debian.org/debian-lts-announce/2025/09/msg00025.html