CVE:CVE-2018-10861
CNNVD:CNNVD-201807-964
Red Hat Ceph是美国红帽（Red Hat）公司的一套Linux PB级分布式文件系统。该系统的主要目标是设计成基于POSIX（可移植操作系统接口）的没有单点故障的分布式文件系统，使数据能容错和无缝的复制。Ceph branches master、mimic、luminous和jewel都是不同的Ceph版本。
Red Hat Ceph中ceph mon处理用户请求的方法存在安全漏洞。攻击者可利用该漏洞删除、创建ceph存储池并损坏快照图像。以下版本受到影响：Red Hat Ceph branches master，mimic，luminous，jewel。
solution:Upgrade ceph ceph to a higher version than 10.2.0,10.2.1,10.2.2,10.2.3,10.2.4,10.2.5,10.2.6,10.2.7,10.2.8,10.2.9,10.2.10,10.2.11,12.2.0,12.2.1,12.2.2,12.2.3,12.2.4,12.2.5,12.2.6,12.2.7,13.2.0,13.2.1,and avoid the version 10.2.0,10.2.1,10.2.2,10.2.3,10.2.4,10.2.5,10.2.6,10.2.7,10.2.8,10.2.9,10.2.10,10.2.11,12.2.0,12.2.1,12.2.2,12.2.3,12.2.4,12.2.5,12.2.6,12.2.7,13.2.0,13.2.1; Upgrade redhat ceph_storage to a higher version than 3,and avoid the version 3; Upgrade redhat ceph_storage_mon to a higher version than 2,3,and avoid the version 2,3; Upgrade redhat ceph_storage_osd to a higher version than 2,3,and avoid the version 2,3; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade opensuse leap to a higher version than 15.0,and avoid the version 15.0; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0