CVE-2022-3854
Fixed in a distro release EPSS <1%CVSS 6.5
A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by providing a null URL to crash the RGW, causing a denial of service.
Products: redhat ceph_storage
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | ceph | 16.2.10+ds-5 |
| Debian 13 | ceph | 16.2.10+ds-5 |
| Debian 14 | ceph | 16.2.10+ds-5 |
| SUSE Enterprise Storage 7.1 | ceph | 16.2.11.58+g38d6afd3b78-150300.3.6.1 |
| SUSE Linux Enterprise Micro 5.1 | ceph | 16.2.11.58+g38d6afd3b78-150300.5.7.1 |
| SUSE Linux Enterprise Micro 5.2 | ceph | 16.2.11.58+g38d6afd3b78-150300.5.7.1 |
| SUSE Linux Enterprise Micro 5.3 | ceph | 16.2.11.58+g38d6afd3b78-150400.3.6.1 |
| SUSE Linux Enterprise Micro 5.4 | ceph | 16.2.11.58+g38d6afd3b78-150400.3.6.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | ceph | 16.2.11.58+g38d6afd3b78-150400.3.6.1 |
| SUSE Linux Enterprise Real Time 15 SP3 | ceph | 16.2.11.58+g38d6afd3b78-150300.5.7.1 |
| Ubuntu 18.04 LTS | ceph | 12.2.13-0ubuntu0.18.04.11 |
| Ubuntu 20.04 LTS | ceph | 15.2.17-0ubuntu0.20.04.3 |
| Ubuntu 22.04 LTS | ceph | 17.2.5-0ubuntu0.22.04.3 |
| openSUSE Leap 15.4 | ceph | 16.2.11.58+g38d6afd3b78-150400.3.6.1 |
| openSUSE Leap 15.4 | ceph-test | 16.2.11.58+g38d6afd3b78-150400.3.6.1 |
| openSUSE Leap Micro 5.3 | ceph | 16.2.11.58+g38d6afd3b78-150400.3.6.1 |