CVE:CVE-2018-14662
CNNVD:CNNVD-201901-490
Red Hat Ceph是美国红帽（Red Hat）公司的一套Linux PB级分布式文件系统。该系统的主要目标是设计成基于POSIX（可移植操作系统接口）的没有单点故障的分布式文件系统，使数据能容错和无缝的复制。
Red Hat Ceph 13.2.4之前版本中存在安全漏洞。攻击者可利用该漏洞窃取ceph磁盘加密中所使用的dm-crypt密钥。
solution:Upgrade redhat ceph to a higher version than 13.2.4,and avoid the version (,13.2.4); Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade opensuse leap to a higher version than 15.0,and avoid the version 15.0; Upgrade redhat ceph_storage to a higher version than 2.0,3.0,and avoid the version 2.0,3.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.10,19.04,and avoid the version 16.04,18.10,19.04