{
  "cveId": "CVE-2022-3854",
  "url": "https://patchblox.com/security/cve/CVE-2022-3854",
  "summary": "CVE-2022-3854 is fixed in 41 products on 1 platform, first by ceph 17.2.5-0ubuntu0.22.04.3, released March 6, 2023. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "ceph: A flaw was found in Ceph, relating to the URL processing on RGW backends",
  "description": "A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by providing a null URL to crash the RGW, causing a denial of service.",
  "published": "2023-03-06T15:15:00Z",
  "severity": "medium",
  "cvss": 6.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
  "epss": 0.00569,
  "epssPercentile": 0.47364,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "ceph",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "16.2.10\u002Bds-5",
      "fix": "DEBIAN-CVE-2022-3854",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-3854",
      "released": "2023-03-06T23:15:11Z"
    },
    {
      "platform": "linux",
      "product": "ceph",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "16.2.10\u002Bds-5",
      "fix": "DEBIAN-CVE-2022-3854",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-3854",
      "released": "2023-03-06T23:15:11Z"
    },
    {
      "platform": "linux",
      "product": "ceph",
      "release": "Debian 14",
      "fixedVersion": "16.2.10\u002Bds-5",
      "fix": "DEBIAN-CVE-2022-3854",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-3854",
      "released": "2023-03-06T23:15:11Z"
    },
    {
      "platform": "linux",
      "product": "ceph",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "ceph 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ceph-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ceph-base",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "ceph-base 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ceph-base-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ceph-common",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "ceph-common 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ceph-common-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ceph-fuse",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "ceph-fuse 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ceph-fuse-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ceph-grafana-dashboards",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "ceph-grafana-dashboards 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ceph-grafana-dashboards-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ceph-immutable-object-cache",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "ceph-immutable-object-cache 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ceph-immutable-object-cache-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ceph-mds",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "ceph-mds 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ceph-mds-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ceph-mgr",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "ceph-mgr 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ceph-mgr-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ceph-mgr-cephadm",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "ceph-mgr-cephadm 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ceph-mgr-cephadm-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ceph-mgr-dashboard",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "ceph-mgr-dashboard 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ceph-mgr-dashboard-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ceph-mgr-diskprediction-local",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "ceph-mgr-diskprediction-local 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ceph-mgr-diskprediction-local-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ceph-mgr-k8sevents",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "ceph-mgr-k8sevents 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ceph-mgr-k8sevents-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ceph-mgr-modules-core",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "ceph-mgr-modules-core 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ceph-mgr-modules-core-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ceph-mgr-rook",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "ceph-mgr-rook 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ceph-mgr-rook-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ceph-mon",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "ceph-mon 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ceph-mon-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ceph-osd",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "ceph-osd 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ceph-osd-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ceph-prometheus-alerts",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "ceph-prometheus-alerts 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ceph-prometheus-alerts-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ceph-resource-agents",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "ceph-resource-agents 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ceph-resource-agents-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "ceph-volume",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "ceph-volume 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-ceph-volume-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "cephadm",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "cephadm 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-cephadm-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "cephfs-shell",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "cephfs-shell 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-cephfs-shell-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "crimson-osd",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "crimson-osd 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-crimson-osd-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libcephfs-java",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "libcephfs-java 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libcephfs-java-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libcephfs-jni",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "libcephfs-jni 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libcephfs-jni-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libcephfs2",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "libcephfs2 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libcephfs2-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "librados2",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "librados2 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-librados2-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libradosstriper1",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "libradosstriper1 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libradosstriper1-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "librbd1",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "librbd1 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-librbd1-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "librgw2",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "librgw2 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-librgw2-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libsqlite3-mod-ceph",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "libsqlite3-mod-ceph 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libsqlite3-mod-ceph-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-ceph",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "python3-ceph 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-python3-ceph-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-ceph-argparse",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "python3-ceph-argparse 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-python3-ceph-argparse-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-ceph-common",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "python3-ceph-common 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-python3-ceph-common-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-cephfs",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "python3-cephfs 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-python3-cephfs-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-rados",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "python3-rados 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-python3-rados-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-rbd",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "python3-rbd 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-python3-rbd-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-rgw",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "python3-rgw 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-python3-rgw-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "radosgw",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "radosgw 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-radosgw-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "rbd-fuse",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "rbd-fuse 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-rbd-fuse-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "rbd-mirror",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "rbd-mirror 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-rbd-mirror-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    },
    {
      "platform": "linux",
      "product": "rbd-nbd",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "17.2.5-0ubuntu0.22.04.3",
      "fix": "rbd-nbd 17.2.5-0ubuntu0.22.04.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-rbd-nbd-17.2.5-0ubuntu0.22.04.3",
      "released": "2023-03-06T15:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}