CVE-2022-3854
ceph: A flaw was found in Ceph, relating to the URL processing on RGW backends
CVE-2022-3854 is fixed in 41 products on 1 platform, first by ceph 17.2.5-0ubuntu0.22.04.3, released March 6, 2023. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
6.5
medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0057
47th percentile
A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by providing a null URL to crash the RGW, causing a denial of service.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| ceph · Debian 12.15 (bookworm) | 16.2.10+ds-5 | DEBIAN-CVE-2022-3854 | Mar 6, 2023 |
| ceph · Debian 13.5 (trixie) | 16.2.10+ds-5 | DEBIAN-CVE-2022-3854 | Mar 6, 2023 |
| ceph · Debian 14 | 16.2.10+ds-5 | DEBIAN-CVE-2022-3854 | Mar 6, 2023 |
| ceph · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | ceph 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| ceph-base · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | ceph-base 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| ceph-common · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | ceph-common 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| ceph-fuse · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | ceph-fuse 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| ceph-grafana-dashboards · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | ceph-grafana-dashboards 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| ceph-immutable-object-cache · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | ceph-immutable-object-cache 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| ceph-mds · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | ceph-mds 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| ceph-mgr · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | ceph-mgr 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| ceph-mgr-cephadm · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | ceph-mgr-cephadm 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| ceph-mgr-dashboard · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | ceph-mgr-dashboard 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| ceph-mgr-diskprediction-local · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | ceph-mgr-diskprediction-local 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| ceph-mgr-k8sevents · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | ceph-mgr-k8sevents 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| ceph-mgr-modules-core · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | ceph-mgr-modules-core 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| ceph-mgr-rook · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | ceph-mgr-rook 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| ceph-mon · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | ceph-mon 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| ceph-osd · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | ceph-osd 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| ceph-prometheus-alerts · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | ceph-prometheus-alerts 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| ceph-resource-agents · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | ceph-resource-agents 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| ceph-volume · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | ceph-volume 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| cephadm · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | cephadm 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| cephfs-shell · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | cephfs-shell 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| crimson-osd · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | crimson-osd 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| libcephfs-java · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | libcephfs-java 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| libcephfs-jni · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | libcephfs-jni 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| libcephfs2 · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | libcephfs2 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| librados2 · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | librados2 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| libradosstriper1 · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | libradosstriper1 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| librbd1 · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | librbd1 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| librgw2 · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | librgw2 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| libsqlite3-mod-ceph · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | libsqlite3-mod-ceph 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| python3-ceph · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | python3-ceph 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| python3-ceph-argparse · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | python3-ceph-argparse 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| python3-ceph-common · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | python3-ceph-common 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| python3-cephfs · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | python3-cephfs 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| python3-rados · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | python3-rados 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| python3-rbd · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | python3-rbd 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| python3-rgw · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | python3-rgw 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| radosgw · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | radosgw 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| rbd-fuse · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | rbd-fuse 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| rbd-mirror · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | rbd-mirror 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
| rbd-nbd · Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | rbd-nbd 17.2.5-0ubuntu0.22.04.3 | Mar 6, 2023 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.