Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-3650

Fixed in a distro release EPSS <1%

A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged information.

Published 2023-01-17 · CVE record · OSV

Products: redhat ceph

Distro releases

ReleasePackageFixed in
Debian 11ceph14.2.21-1+deb11u1
Debian 12ceph16.2.10+ds-4
Debian 13ceph16.2.10+ds-4
Debian 14ceph16.2.10+ds-4
Red Hat ceph storage 5.3ceph-mgr2:16.2.10-138.el8cp
Red Hat ceph storage 5.3ceph-mgr-cephadm2:16.2.10-138.el8cp
Red Hat ceph storage 5.3ceph-mgr-dashboard2:16.2.10-138.el8cp
Red Hat ceph storage 5.3ceph-mgr-debuginfo2:16.2.10-138.el9cp
Red Hat ceph storage 5.3ceph-mgr-debuginfo2:16.2.10-138.el8cp
Red Hat ceph storage 5.3ceph-mgr-diskprediction-local2:16.2.10-138.el8cp
Red Hat ceph storage 5.3ceph-mgr-k8sevents2:16.2.10-138.el8cp
Red Hat ceph storage 5.3ceph-mgr-modules-core2:16.2.10-138.el8cp
Red Hat ceph storage 5.3ceph-mgr-rook2:16.2.10-138.el8cp
SUSE Enterprise Storage 7.1ceph16.2.11.58+g38d6afd3b78-150300.3.6.1
SUSE Linux Enterprise Micro 5.1ceph16.2.11.58+g38d6afd3b78-150300.5.7.1
SUSE Linux Enterprise Micro 5.2ceph16.2.11.58+g38d6afd3b78-150300.5.7.1
SUSE Linux Enterprise Micro 5.3ceph16.2.11.58+g38d6afd3b78-150400.3.6.1
SUSE Linux Enterprise Micro 5.4ceph16.2.11.58+g38d6afd3b78-150400.3.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP4ceph16.2.11.58+g38d6afd3b78-150400.3.6.1
SUSE Linux Enterprise Real Time 15 SP3ceph16.2.11.58+g38d6afd3b78-150300.5.7.1
Ubuntu 18.04 LTSceph12.2.13-0ubuntu0.18.04.11
Ubuntu 20.04 LTSceph15.2.17-0ubuntu0.20.04.3
Ubuntu 22.04 LTSceph17.2.5-0ubuntu0.22.04.3
openSUSE Leap 15.4ceph16.2.11.58+g38d6afd3b78-150400.3.6.1
openSUSE Leap 15.4ceph-test16.2.11.58+g38d6afd3b78-150400.3.6.1
openSUSE Leap Micro 5.3ceph16.2.11.58+g38d6afd3b78-150400.3.6.1