# CVE-2022-3854: ceph: A flaw was found in Ceph, relating to the URL processing on RGW backends CVE-2022-3854 is fixed in 41 products on 1 platform, first by ceph 17.2.5-0ubuntu0.22.04.3, released March 6, 2023. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2022-3854 - Priority: Routine - CVSS: 6.5 (medium) - EPSS: 0.0057 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Mar 6, 2023 ## Description A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by providing a null URL to crash the RGW, causing a denial of service. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | ceph Debian 12.15 (bookworm) | 16.2.10+ds-5 | [DEBIAN-CVE-2022-3854](https://patchblox.com/security/data/fix/linux/debian-cve-2022-3854.md) | Mar 6, 2023 | | Linux | ceph Debian 13.5 (trixie) | 16.2.10+ds-5 | [DEBIAN-CVE-2022-3854](https://patchblox.com/security/data/fix/linux/debian-cve-2022-3854.md) | Mar 6, 2023 | | Linux | ceph Debian 14 | 16.2.10+ds-5 | [DEBIAN-CVE-2022-3854](https://patchblox.com/security/data/fix/linux/debian-cve-2022-3854.md) | Mar 6, 2023 | | Linux | ceph Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [ceph 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ceph-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | ceph-base Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [ceph-base 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ceph-base-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | ceph-common Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [ceph-common 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ceph-common-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | ceph-fuse Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [ceph-fuse 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ceph-fuse-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | ceph-grafana-dashboards Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [ceph-grafana-dashboards 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ceph-grafana-dashboards-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | ceph-immutable-object-cache Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [ceph-immutable-object-cache 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ceph-immutable-object-cache-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | ceph-mds Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [ceph-mds 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ceph-mds-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | ceph-mgr Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [ceph-mgr 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ceph-mgr-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | ceph-mgr-cephadm Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [ceph-mgr-cephadm 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ceph-mgr-cephadm-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | ceph-mgr-dashboard Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [ceph-mgr-dashboard 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ceph-mgr-dashboard-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | ceph-mgr-diskprediction-local Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [ceph-mgr-diskprediction-local 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ceph-mgr-diskprediction-local-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | ceph-mgr-k8sevents Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [ceph-mgr-k8sevents 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ceph-mgr-k8sevents-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | ceph-mgr-modules-core Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [ceph-mgr-modules-core 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ceph-mgr-modules-core-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | ceph-mgr-rook Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [ceph-mgr-rook 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ceph-mgr-rook-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | ceph-mon Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [ceph-mon 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ceph-mon-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | ceph-osd Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [ceph-osd 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ceph-osd-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | ceph-prometheus-alerts Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [ceph-prometheus-alerts 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ceph-prometheus-alerts-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | ceph-resource-agents Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [ceph-resource-agents 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ceph-resource-agents-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | ceph-volume Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [ceph-volume 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-ceph-volume-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | cephadm Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [cephadm 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-cephadm-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | cephfs-shell Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [cephfs-shell 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-cephfs-shell-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | crimson-osd Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [crimson-osd 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-crimson-osd-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | libcephfs-java Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [libcephfs-java 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libcephfs-java-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | libcephfs-jni Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [libcephfs-jni 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libcephfs-jni-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | libcephfs2 Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [libcephfs2 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libcephfs2-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | librados2 Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [librados2 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-librados2-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | libradosstriper1 Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [libradosstriper1 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libradosstriper1-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | librbd1 Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [librbd1 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-librbd1-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | librgw2 Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [librgw2 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-librgw2-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | libsqlite3-mod-ceph Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [libsqlite3-mod-ceph 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libsqlite3-mod-ceph-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | python3-ceph Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [python3-ceph 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-python3-ceph-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | python3-ceph-argparse Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [python3-ceph-argparse 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-python3-ceph-argparse-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | python3-ceph-common Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [python3-ceph-common 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-python3-ceph-common-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | python3-cephfs Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [python3-cephfs 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-python3-cephfs-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | python3-rados Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [python3-rados 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-python3-rados-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | python3-rbd Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [python3-rbd 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-python3-rbd-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | python3-rgw Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [python3-rgw 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-python3-rgw-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | radosgw Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [radosgw 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-radosgw-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | rbd-fuse Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [rbd-fuse 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-rbd-fuse-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | rbd-mirror Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [rbd-mirror 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-rbd-mirror-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | | Linux | rbd-nbd Ubuntu 22.04.1 LTS (jammy) | 17.2.5-0ubuntu0.22.04.3 | [rbd-nbd 17.2.5-0ubuntu0.22.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-rbd-nbd-17.2.5-0ubuntu0.22.04.3.md) | Mar 6, 2023 | --- Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.